diff --git a/vm-boot-protect.sh b/vm-boot-protect.sh
index 6f7bf92..0241a45 100755
--- a/vm-boot-protect.sh
+++ b/vm-boot-protect.sh
@@ -133,13 +133,16 @@ if qsvc vm-boot-protect || qsvc vm-boot-protect-root; then
         fi
     fi
 
-    # Don't bother with root protections in template or standalone
+    # Begin exit if in template or standalone
     if ! is_rwonly_persistent; then
         make_immutable
-        exit 0
     fi
 
 fi
+# Exit if in template or standalone
+if ! is_rwonly_persistent; then
+    exit 0
+fi
 
 
 # Protection measures for /rw dirs: