use RUBYGEMS_REPO everywhere
match the Rubygems certs exactly, for now