Protect marks fd as protected from routing loops, if any. On Android, this means calling VpnService.protect(fd) to exempt it from fwmarks that route it back into the TUN device operated by firestack.
(who string, fd int)
source not stored for this graph (policy: none)