as i understand it  jenkins slaves  sorry anita  can comprimise the master sorry again so if we have the  publishing  slave or any other less trusted slave connected to jenkins o o they could comprimise this slave which is meant to be higher security  this is the long way of asking  do we need a separate jenkins master for this 