Only attempt to upgrade rubygems.org to HTTPS

Upgrading other sources will lead to user confusion.

See #481