block/crypto: disallow write sharing by default