Install unsigned gems with -P MediumSecurity

This fixes a regression from RubyGems 1.8.x where you could install
unsigned gems with -P MediumSecurity (such as dependencies).

Patch suggested by @presidentbeef

Fixes #859