team: allow read/write-only options