it would be invoked by some Jenkins job, so anyone changing Jenkins job configurations can alter critical httpd rules, like to have it serve private keys or do other crazy stuff like have it act as proxy or gateway to other systems. It's just a sensitive configuration file.

From a practicality point of view, you also can't have a Jenkins build job to perform anything locally if it's running on a slave, so you'd need to setup a second build job to trigger after the site build.