I think, but am more than willing to be corrected on this if I'm wrong, that when you add a nick to the protect list, it adds it in the equivalent address format of nick!*@*.*
Which, in turn, would make it match any ident and/or address, so long as the nick matches.
