def is_protected_key(key):
    """
    Returns whether the given key is a protected key. ('password' or starts with underscore).

    :param key: The key to check
    :return: True, if the given key is a protected key, otherwise False
    """
    return key == 'password' or key.startswith('_')
