Update prerelease version history for security fixes
Refuse old-format gems with a security policy

Old format gems do not contain any signing information.

Previously these gems were not checked for a signature upon
installation when a security policy was in effect.

Now these gems are rejected whenever the security policy requires data
verification.  All built-in policies except NoSecurity require data
verification.