Allow setting access_level of new runner to not_protected (default) or ref_protected Minor update to relevant docs and tests