Add the "autoro" flag to /media. This makes it attempt to mount
it read-only instead of just failing if the media is write-protected.

The /net doesn't seem to require the flag.

MFC after: 2 weeks
Relnotes: yes
Sponsored by: DARPA, AFRL