How about:
/dev/scd0 /mnt/hfs auto defaults,ro,noauto,users,noexec,umask=000 0 0
or:
/dev/scd0 /mnt/hfs hfs defaults,ro,noauto,users,noexec,umask=000 0 0