Add "low cost" hardening build flags to OS X

I would propose including the following flags in our OS X clang build:

-Werror=format
-Werror=format-security
-fstack-protector-strong
-pie
-fPIE (already there)
-D_FORTIFY_SOURCE=2 -O1
-Wl,-z,relro,-z,now

To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information