modify upstream makefile to allow hardening build flags to apply