travis is secure by default now