Don't include protected pages in sitemap. Fixes #407