Surprisingly, Lib Task Reactor does not define the default attains. In Jenkins it means that some initialization tasks may be executed AFTER Jenkins switches to the COMPLETED initialization milestone. It was a root cause of SECURITY-667.

IMHO we need to prevent it alltogether by hardening the default rules in the Task Reactor.