use -fstack-protector-strong when available