Simplify (and fix) check-dfsan configs