Update assert to reflect protected subtoken length