Have separate secure and non-secure public builds

Our security concept doesn't allow us to move artifacts built in non-secure environments to secure environments.
This means we'll have to make sure that the boxes we release are built on a runner marked as
3 jobs for master in 28 minutes and 32 seconds (queued for 2 seconds)