Make the hardening compile flags the same as on recent Ubuntu