evm: skip replacing EVM signature with HMAC on read-only filesystem