[JENKINS-10593] Allow a job to block inheritance from the parent ACL

Currently, a job can enable project-based matrix authorization, but all ACL
entries from the parent (or the global matrix strategy) will automatically
be inherited. That means it is impossible to create a job that has a stricter
access control list than the global security.

This change adds the ability to block inheritance from the parent ACL, thus
allowing the job to truly define its own ACL, and allowing the job to have
tighter restrictions than other jobs.

This addresses issue https://issues.jenkins-ci.org/browse/JENKINS-10593