What are the primary use cases and trade-offs of implementing read-only replicas in a directory service using PingDirectory?