add a dependency for protected_attributes because that's easier