Make mass assignment to attr_protected model medium confidence

Because `attr_protected` is still kind of scary, to be honest.