Access protected fields

We need to update and amend protected fields (those with names preceded by _underscore in the database) via WP API. We have a temporary solution – hacking the plugin to replace all calls to is_protected_meta with a function which always returns false. Clearly this is not sustainable, so how is the requirement to access protected fields via WP API correctly enabled?

https://wordpress.org/plugins/json-rest-api/