protect: set oldProtection after getting API result