At the moment everybody is able to run bulk builder, even unauthenticated users. This is very dangerous so we can't use the plugin. The plugin should repect the "Authentication" settings.
On "Logged-in Users Can Do Anything" the Bulk Builder Option should only be displayed for Logged-In users.
For "Matrix-based security", the Build Builder should only be available if Job Build permission have been given. Or even an own group should be given to the plugin, so the administrator can decide, if he would like to only allow Administrators to run a Bulk Build.