With –noconfmem, portage will “forget” that it has already made a ._cfg file for a CONFIG_PROTECT file, thus causing portage to reinstall the ._cfg file needed for updating.