points HH in internal gemfile at GitHub -- the 5.3.0 gem causes authZ failures (can? edit is always true)