(Un)protect should only be applicable to root

[mweststrate]

This prohibits trees that are partially unprotected, which might be less confusing to work with. Also can be used to make the protection checks much faster