-Werror is for upstream, not for packages
    
    ... especially as it breaks our build in configure:
    
    configure:8237: gcc  -O2 -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches -m64 -mtune=generic -Wl,-z,relro  conftest.c  >&5
    cc1: error: -Wformat-security ignored without -Wformat [-Werror=format-security ]