Disable RW operations if they are not available

[sevoku]

If write operations are not available we should disable them and log a warning or make the errors more actionable (i.e. link to docs, instead of showing the unauthorized exception). This is specifically important if only RO key auth is available (see #2856) or when the account has only Read RBAC permission.