Selected clang / g++ options are based on recommendations provided by
https://wiki.debian.org/Hardening.
