Allow default values to be set on protected fields during object creation

A few lines above `permitted_vals` is set to `[]`. So is it a dictionary or a list?