run-command: prettify -D_FORTIFY_SOURCE workaround