Make sure callbacks aren't mixed up in user update.
Delete fix, allow "protected" attribute on image update.