[RFC] build: turn down the _FORTIFY_SOURCE level on gcc >= 4.0

I squashed in a pointer to the issue in the comment.  Thanks for the review!