Protected entity job shop – and how to fix it