check -Wformat-security by default since Android does too
fix issue spotted by -Wformat-security