Use buildflags to enable hardening (https://wiki.debian.org/Hardening)