Change -O4 to -O3 -flto on OSX for new clang (should work with older one too)
Enable PIE to allow ASLR (security)