fix re-open issue with ruby-zip

also make the rubyzip dependency versioning extremely conservative. We
are hacking things in, so it's likely to break again.