I have a base Docker image with a server on it that will then get built on top of to host specific applications. Is there a way to prevent certain files from being overwritten in downstream images.

For example, let's say I had an Apache Tomcat image and I don't want someone else with an app to override the `web.xml` file by running `ADD myapp/web.xml $CATALINA_HOME/conf` within their Dockerfile.