Add SimpleCov into the mix to get C0 coverage stats.

Plug in SimpleCov, as even the minimal guarantees provided by C0 coverage can prove handy for a security-related tool.
This patch looks fine other than this bit. Why restrict simplecov to Ruby 1.*.* when 2.1.2 is current?