[mcs] Add special-cased HostProtectionAttribute handling