Allow custom bundler commands in spec script
CodeClimate-recommended security fixes