why without_protection on these calls?