Don't protect firmware now if protect-ro-at-boot is not set
Don't protect firmware now if protect-ro-at-boot is not set

Otherwise, EC software sync protects the entire firmware except in recovery mode, regardless of the WP pin.

BUG=chrome-os-partner:11847
TEST=boot with WP enabled but RO-at-boot disabled; flashinfo should show
entire flash still writable

CQ-DEPEND=28444

Change-Id: I58d60adfaa952b127e8695213f95f6da0e34821d
Signed-off-by: Randall Spangler <62698fdbb84d1779579ee80c3f39fac22017e5bc@chromium.org>
Reviewed-on: https://gerrit.chromium.org/gerrit/28445
Reviewed-by: Bill Richardson <129945214b1d548d8e49b6c29c43094f8c78057f@chromium.org>

fourier49/BZ_DEV_EC,coreboot/chrome-ec,fourier49/BZ_DEV_EC,akappy7/ChromeOS_EC_LED_Diagnostics,mtk09422/chromiumos-platform-ec,alterapraxisptyltd/chromium-ec,md5555/ec,fourier49/BZ_DEV_EC,gelraen/cros-ec,gelraen/cros-ec,coreboot/chrome-ec,md5555/ec,coreboot/chrome-ec,akappy7/ChromeOS_EC_LED_Diagnostics,thehobn/ec,md5555/ec,md5555/ec,fourier49/BIZ_EC,akappy7/ChromeOS_EC_LED_Diagnostics,thehobn/ec,alterapraxisptyltd/chromium-ec,fourier49/BZ_DEV_EC,akappy7/ChromeOS_EC_LED_Diagnostics,thehobn/ec,mtk09422/chromiumos-platform-ec,mtk09422/chromiumos-platform-ec,coreboot/chrome-ec,fourier49/BIZ_EC,coreboot/chrome-ec,longsleep/ec,gelraen/cros-ec,mtk09422/chromiumos-platform-ec,akappy7/ChromeOS_EC_LED_Diagnostics,coreboot/chrome-ec,fourier49/BIZ_EC,eatbyte/chromium-ec,alterapraxisptyltd/chromium-ec,longsleep/ec,eatbyte/chromium-ec,eatbyte/chromium-ec,alterapraxisptyltd/chromium-ec,thehobn/ec,fourier49/BIZ_EC,longsleep/ec,longsleep/ec,eatbyte/chromium-ec,gelraen/cros-ec