I believe that in 2.0, even client scripts can be protected, but I'm not 100% sure of that.