pa01 fixture up; protected content is under /protected