introduced a config to enable_protected_attributes