hardened cflags