disable LTO by default

The -flto flag slows down linking dramatically without providing a
noticeable improvement in speed or size.  Rather than take the
build-time hit every time we rebuild, let's only do it when it's
explicitly requested.