Tidy up FORTIFY_SOURCE handling
-
the current placement of CFLAGS filtering means lib32 misses out. Not a real problem because identical binaries are created whether it's filtered or not. It matters only for the testsuite. Nevertheless fix the inconsistency
-
remove some outdated comments
-
tweak the testsuite adjustments
-
add 2 minor shellcheck quoting tweaks