not missing stdint.h anymore since tedu merged my patch upstream
missing arc4random_buf(), and sort decls while here
enable more warnings, and s/CPPFLAGS/CFLAGS/