It passes for me w.o. without_protection => true. Do you know what fails? We'll use it if we have too, but I didn't expect it.