Could/Should the `cache.protected` mode be hidden to the user, enabled automatically for `cache.type` `hardlink` or `symlink`, and disabled otherwise? Just wondering what's the value of having the user manually configure something that is always required for those cache link types.