The first two checks should filter away legacy cases for projects without <code>QueueItemAuthenticator</code>s. 

AFAIK, there is only one public implementation - "Authorize Project" from @ikedam.
This implementation requires the explicit enabling of the <code>JobProperty</code>, so the user should confirm he wants to use specific authorization inside the build. 
For this case we can consider the issue as a SECURITY bugfix even if a regression appears