My take on Jenkins with all its plugins is that it need to be properly shielded from external access anyways.