protect_ntfs: turn on NTFS protection by default