The verification flag was being passed through to the bootloader template script but no longer had any effect. Force the base image to always remain writable, its only purpose is to be modified in a later build step anyway.