@bfd My favorite Jenkins security fail is the way it (used to?) embed passwords in src. cc: @onejli