Fix adding users to protections (existing was always null)