@hubertf security features are enabled by default through the share/mk infrastructure and via pkgsrc - not at the compiler level