use a secure transport to fetch gems (or else they can be compromised?)
give ftp some props
Fix #23. use `build_dir` as specified in config.rb
bump