hardening: enable regular SSP support by default