Use out-of-source-builds ... again

This is mainly because locally coverity_scan just works, while it is not
catching everything when run via travis.