@joshk: Okay, I'll rename secure_pull. The reason I select `target.source` is because `Job#secure_env_enabled?` delegates to Build#secure_env_enabled. I need to set `secure_pull_request` on the Build so that it will be in scope when the method delegates.