sanitize CFLAGS