add export DEB_BUILD_MAINT_OPTIONS=hardening=+all

according to
https://lists.debian.org/debian-mentors/2014/06/msg00103.html