Per https://github.com/jenkinsci/matrix-auth-plugin/pull/170, the JobProperty provided by matrix-auth has its doCheck form validation called with a null @AncestorInPath AccessControlled. Given that Jenkins is an AccessControlled, this seems wrong.

If this is intentional to sort of represent that the form validation is for an object that does not yet exist, this needs to be documented (better).