[Bug 164422] auto-protect by vendor should only be done during distribution upgrade