Enable hardened builds by default
Revert to a dynamic IPSECBASEVERSION based on date. When cutting a new release this will be rewritten but not committed.