Methods visibility from private to protected

[rdphv]

In order to extend OpenApiValidationMiddleware

[hkarlstrom]

What in particular would you like to extend? I actually have no strong opinion on this, other than it might be a hassle for anyone that has extended it if the class interface changes in the future?