It seems that setting Maproot User, Maproot Group, Mapall User, and Mapall Group all to "N/A" results in a read-only share. With NFS, isn't anybody with a whitelisted IP address supposed to be able to do absolutely everything by default, while restricting permissions requires active effort?