Right now im using this:
entity["merchant1"].behavior["interaction_by_player"] = "none";
entity["merchant1"].behavior["attackable_in_realtime"] = true;
entity["merchant1"].behavior["hostility"] = "always";
entity["merchant1"].behavior["player_interest"] = "seek";
It does make the NPC attackable, but it will not attack the player even if damaged