lock down openssl gem