When turned off, it will put the app in a writable rootfs. This allows us to debug live/production apps (like change start.sh) and just get them up and running. Once turned off, this app cannot be updated anymore (unless the force flag is set). This way we can then update it using the CLI if we are convinced that the upcoming update fixes the problem. Part of #171