Lock our Ruby version.
Use HTTPS for Rubygems
Use bundler binstubs.
Okta SSO, yeah. What else is it?