tests: move -D_FORTIFY_SOURCE to CPPFLAGS