What I want is:
no access unless somebody logs in with google
BUT
Build Triggers must work as well.
So get a "invalid credentials" error message when I go to
JENKINS_URL/job/MY_BUILD_NAME/build?token=MY_SECRET_TOKEN
Unless I give "Overall READ and Job/Read" permissions to Anonymous, it just does not work.
But if I do that the whole world can see my builds, my name, etc...