/var/qmail/alias should be in CONFIG_PROTECT so that upgrading qmail does not overwrite existing aliases, and so that when old versions of qmail are removed default aliases and the /var/qmail/alias directory itself is not removed.
Already done in -r11 and -r12.