LDFLAGS, CXXFLAGS, and running service as non-root