add readonly-modify and readonly-remove to protection configs. allows you to not allow users to remove or modify their protection. (e.g if it's automatically protected using autoRegister)