Selected clang / g++ flags are based on recommendations provided by
https://wiki.debian.org/Hardening.
