another security fix for travis