debian/rules: enable all hardening