See T992: libgcrypt-1.4.4 unconditionally replaces "-O" with "-O1", potentially breaking other $CFLAGS