WIP: make it (securely) runnable on jenkins?