test: use ForbiddenAttributesProtection interface