Fedora 25's gcc doesn't support `-fcf-protection`,
`-fstack-clash-protection`, or `-fwrapv-pointer`.  genfs runs on trusted
input, so these flags are not necessary.  Drop them.