tweaks to protected file system for orbis