Debian hardening

* Fortify functions added via CPPFLAGS
* Read-only relocation added via LDFLAGS