After [moving off travis](https://github.com/mozilla/rkv/issues/213) we should add a `cargo audit` run to the CI job.