The only way I see to really do that is to have a separate ftp server that has only a few admin shell accounts. Then it can export a filesystem via NFS to other boxes in readonly mode. I know that a separate server wasn't what you were looking for, but the cost should be small. A retired pc from yesteryear could be reused with linux or bsd for little cost.