Make CFLAGS do proper hardening as well