Another tweak to protected user logic; throw a special exception rather than returning empty follower/followee lists, and let the application decide what to do when a protected user is encountered