Compile with CPPFLAGS and LDFLAGS and append, rather than overwrite, CFLAGS. This enables the Debian package to be built with hardening options. See https://wiki.debian.org/Hardening.