only have protection kick in after the user changes something