clang -mcet -fcf-protection (was: Re: Mass Rebuild for Fedora 28)