small fix in user manifest creation code. now it will fail if protection
cannot be set