copy-job checks CREATE on Jenkins root, when it only needs to do so on the actual target of the copy. Also it fails to check EXTENDED_READ on the source.

create-job also checks CREATE needlessly on root.