Ensure CPPFLAGS can be passed through without destruction.

This helps Debian hardening
https://wiki.debian.org/Hardening