just call validate_unprotected directly.