.travis.yml fixes
security for build.sh script