Add "low cost" hardening build flags to OS X

I would propose including the following flags in our OS X clang build:

-Werror=format
-Werror=format-security
-fstack-protector-strong
-pie
-fPIE (already there)
-D_FORTIFY_SOURCE=2 -O1
-Wl,-z,relro,-z,now