This moves setting the protected attribute of a pipeline to a separate
pipeline chain step in order to perform the assignment after validation.