How do I protect user_activation_key?

How do I protect user_activation_key?