In MDL-58018 we introduce the ability to have read only sessions. However it currently only supports the redis, database and memcached handlers. Though using the file handler is not nearly as effective as the other handlers it is still the default one so should have the same ability.