We have just implemented this and noticed the protectionMessage in config is never used. The damaged blocked message appears to be hardcoded.

This "Protection Message" should be found in the /oxide/lang folder. This can be altered for every language you support