new gem certs that aren't expired
made calls to rubygems integration lazy instead of triggered in init