* Update to debhelper compatibility level V9. - Enable compiler hardening flags, including bindnow and PIE. * Move single-debian-patch to local-options and patch-header to local-patch-header so that they only apply to the packages I build and NMUs get regular version-numbered patches.