Support GCC/LLVM stack-smashing protection

Turn it on with `cmake -DENABLE_SSP=1` RedHat uses more secure against buffer/stack overflow exploits.