send 'spectators' and 'protected' to master server

 fixes #6041
or maybe better: `passwordProtected`.