Add -fstack-protector back on Mac... turns out it does work on clang.