paranoid improvements

1. Ooops, it is VERYPARANOID, not VERY_PARANOID.
2. Use extra paranoid CFLAGS/CPPFLAGS/LDFLAGS. It doesn't matter if
Debian enables these flags by default because we're not targeting
on a particular distribution and must be fine on any decent Linux
setup.