fetch gems securely to make travis CI happy