Merge pull request #1764 from entireio/protected-dirs

fix(checkpoint): exclude protected dirs from first-checkpoint snapshot