harden makefile