Sadly CAN bus doesn't have that option, although I suppose you could put a MITM sort of device which rejected any write packets. Could be an interesting gizmo to market to car makers.