yet more -Werror=format-security errors
    
    These ones are arguably bugs, if the client code is really dumb enough
    to pass junk containing '%' signs where a constant string like
    "SQL_MODE_READ_ONLY" is expected. Otherwise, they're false positives,
    too.