protect extension, not plugin anymore