Enable and check PIE in makerelease-osx

Position-independent Executables enable Address Space Layout
Randomization (ASLR) style security features, which makes it harder to
exploit certain security vulnerablities.

Closes GH-174
makerelease-osx: Do not hardcode -Os into CXXFLAGS