Updated hardening flags. Turns out the host_os should have replaced
target_os.
Fix typo for address sanitizer.