configure: add flags to support SafeStack