CMakeLists: Enable PIE, full RELRO and stack protector