At this point, I believe protected replies will show up in your “friends:” timeline, but they won’t in any other queries (as those are pulled from Summize). Moving the @ and from: queries to the Twitter API from the Summize API will allow protected updates to appear those timelines and I hope to have that addressed soon.