Add stack-smashing protection, relro and PIE to default CFLAGS.

2bwm works fine with these changes and this tightens it up against
potential corruption.