Build with Fedora hardening flags
We should build everything using the same hardening flags as Fedora (which are currently -- and generally -- a year or two ahead of Debian).
This probably depends on https://gitlab.com/freedesktop-sdk/freedesktop-sdk/issues/317 because we will want to reuse the GCC spec files from freedesktop-sdk.