configure.ac: add an --enable-relro option