hardening: enable RELRO by default