Restrict gempsec to compatible RSpec versions

After RSpec 3, `should` is not defined by default.