Add hardening flags

Remove -PIE since shared libs already do this
by using -fPIE, and it causes problems (build fails
because of undefined references to python objects).

see dpkg-buildflags(1) for more info.