FIX mass-assign protected attributes