build: if -fstack-protector-strong is available, use it.
man: mention XDG_CONFIG_HOME in systemd.unit