In an incognito browsing tab go to https://jenkins.ci.cloudbees.com/job/plugins/job/m2release-plugin/m2release/. This page is displayed even though you are anonymous and would not be offered the link to get here.

Actually trying to submit the form will fail, but still.

The fix is to specify the permission attribute on l:layout.