Temporarily use -O1 until segfault with -O2+krb5+iksd is fixed