When changing AFT visibility in action=protect, add to log

Change-Id: Icee466faa962ad4c4e49b68dbb054e543b93b0a7