Add enforce-victims-rule to prevent shipping with vulnerable dependencies

https://www.pivotaltracker.com/story/show/72875022