These options should always be specified. Note, an implication of this change is that not specifying any grsec/PaX options results in a build failure.