overrides: ceph: conf: client: rbd default map options: ms_mode=secure,read_from_replica=balance