I would like to have a way that guarantees the slave from a cloud will not be reused by another job. This way we can allow jobs to play with the slave setup and possibly leave it in inconsistent state.

Retention time == 0 does not seem to guarantee that.