1) Ownership plugin sets default project-specific security settings on reconfiguration of job w/o security
2) Reconfiguration of default item-specific security in global configs does not give appropriate effect, because all previously configured jobs already have security

Workaround: Click on "Restore defaults" button on the project-specific security configuration page