security/ruby-password: fix