It would probably be a good idea to add a check for protected content to the sitemap:

   if (!Umbraco.IsProtected(c.Id, c.Path))
       {
          <li>     
           <a href="@c.NiceUrl()">@c.Name</a>
           @traverse(c)
          </li>           
       }