Jenkins should warn users when the remote (token) trigger would not work (i.e. the job is not readable by anonymous), and maybe suggest use of Build Token Root plugin.