Protect schema upgrades

Change-Id: I80d620b28177727485ae922dddc13c3d7af6849d