There was no reason that CMock init and destroy calls should be in the protected blocks. teardown is more flexible if verify is called afterwards.