Enabling tamper protection bit after having programmed non-volatile security key?

I have a Cyclone V device already programmed with a non-volatile key. I now want to set the tamper protection bit. I have tried programming a .ekp that sets the relevant bit but the operation failed ...