I noticed in the register_post_status function in core that there is an arg for 'protected'.The following post