cmake: enforce additonal compiler checks