Article 54 gives some sites that may not be attacked. Maybe a protected person cannot render at least those sites “immune” since they are already immune.