new /protocol/id/publication resource
Use POST with published=true|false to change the protocol flag only