Allow to protect users as root.

You can now pass the unix user to the protect sub-command.
Update usage help.
Don't ask token if the user has not enabled it.

In that case we just let the user in.