add removeRoles() / removeProtectionAttributes() -- clean up after removed protections