If the production site server runs Windows, uses a key pair for login, and is created by an IAM user, only that IAM user can create a protected instance for this server. Other users do not have permissions on the key pair of this server. If they create a protected instance for this server, the creation will fail.