if that is the case, is `secure_pull_request` ever used on the Job model?