Change application_settings.protected_paths column to use null: false

application_settings.protected_paths column was introduced on !16463 (merged).

We have defaults for that column at database and application-level, for consistency purposes it would be a good idea to add null: false