Was further along in the code, and it wasn't totally clear in some of the callers that the last param is `protect` -- it was just a dangling `true` or `false`.