diff --git a/mediatek.c b/mediatek.c
index 4492207..6d77970 100644
--- a/mediatek.c
+++ b/mediatek.c
@@ -54,7 +54,8 @@ static int mediatek_init(struct driver *drv)
 	drv_add_combinations(drv, texture_source_formats, ARRAY_SIZE(texture_source_formats),
 			     &LINEAR_METADATA, BO_USE_TEXTURE_MASK);
 
-	drv_add_combination(drv, DRM_FORMAT_R8, &LINEAR_METADATA, BO_USE_SW_MASK | BO_USE_LINEAR);
+	drv_add_combination(drv, DRM_FORMAT_R8, &LINEAR_METADATA,
+			    BO_USE_SW_MASK | BO_USE_LINEAR | BO_USE_PROTECTED);
 	/*
 	 * Chrome uses DMA-buf mmap to write to YV12 buffers, which are then accessed by the
 	 * Video Encoder Accelerator (VEA). It could also support NV12 potentially in the future.
diff --git a/rockchip.c b/rockchip.c
index ed8a7ae..43cbfe2 100644
--- a/rockchip.c
+++ b/rockchip.c
@@ -141,7 +141,7 @@ static int rockchip_init(struct driver *drv)
 	 */
 	drv_add_combination(drv, DRM_FORMAT_R8, &metadata,
 			    BO_USE_CAMERA_READ | BO_USE_CAMERA_WRITE | BO_USE_SW_MASK |
-				BO_USE_LINEAR);
+				BO_USE_LINEAR | BO_USE_PROTECTED);
 
 	kms_items = drv_query_kms(drv);
 	if (!kms_items)