Use hardening flags for Debian builds