debian/rules: add hardening=+all