add hardening flags;bump standards-version;prune lintian overrides