add Rubocop's security checks to CI

[flavorjones]

Security issues such as the one reported in #547 could be avoided by running Rubocop security checks as part of the test suite.

Rubocop will not run against code that supports Ruby 1.9 syntax, so this issue is blocked on #563.