packaging: Build PIE executables to allow address space randomization