how to protect wordpress plugins