Add null checking to two protectFromVpn calls

The code directly after both of these checks for null first, so to be
consistent new bits should too.

Change-Id: Iac6cd25de3ae9d3d1dd5d3780ef6fc1189f1334a