+ * Switch dh compat level from 8 to 9.
+ * Enable all hardening flags via DEB_BUILD_MAINT_OPTIONS.
+ * Export CFLAGS as CCFLAGS which is honored by the current
+ SConstruct file.
+ * Add debian/patches/honor-cppflags - scons should use exported
+ CPPFLAGS.