The Debian package currently has the jenkins user in group "nogroup" and most files owned by group "adm". That's a pretty strange setup. It would be more normal if the jenkins user had its own group "jenkins" and all files were owned by jenkins:jenkins.