fixes #7850 - pin mixlib-shellout for Ruby 1.8 compatibility
fixes #7822 - forbid HTTPS requests with no client SSL certificate