We should also probably add a check somewhere that we don't end up with transitively pulled in gems that are not defined as puppet-runtime components.