Range-diff !340

back to !340 policy, hookd, control, web, wiki: protected tags, and a release keeps its tag