use hardening flags by default