Although this appears to be an issue it is more of an eye sore than an actual configuration issue. The SSH and CIM protocols are not needed when the CAS agent unlocked. The CAS agent is the Common Agent Service that is preloaded on ALL AIX/VIO Operating Systems and it essentially bypasses the need for SSH or CIM. If there were protocols that were needed still but were locked then the Access state would show as 'Partial' and not as 'OK'.
In our lab we also do not have SSH or CIM but if CAS is okay then VMcontrol will operate properly (see attached).
If you wanted to, you could select both CIM and SSH and click Actions then Remove to get rid of these no access protocols but I wouldn't recommend it.
I hope this helps!!