Unfortunately IBM never enforced this restriction, and even though a load module may have been linked as refreshable, it is possible that the program may not have honored that guarantee and was actually updating program storage. Changing the PROGxx default to REFRPROT will enforce the restriction and if changed , any module marked as refreshable will be protected from modification by placing it in key zero, non-fetch-protected storage.
