set VerifyHostKeyDNS to ask in the default configuration (#739856)
- Added -z relro -z now to LDFLAGS