I'm not sure, but I think it treats all of the CPn, WRTn, and EBTRn as "code protection bits" so if they're set to 0 I don't think you'll be able to change them.

According to the datasheet the WRTC Configuration protect bit can only be written via ICSP or an external programmer.