There's an inconsistency in the Job DSL for promoted builds as opposed to normal jobs. The "Label Expression" for "Restrict where this (promotion process|project) can be run" is given using the "label" instruction in the project, but using the "restrict" instruction in the promotion. This is confusing, please streamline.