Make installd properly handle protected packages on SD.

Pass a third argument to protect() which instructs it that
the new package is on external storage.