Use out-of-source-builds ... again

This is mainly because locally coverity_scan just works, while it is not
catching everything when run via travis.
Merge remote-tracking branch 'origin/master' into coverity_scan