Respect system CXXFLAGS
Respect system CXXFLAGS

Especially source distros will have to patch this downstream,
since -Os, -ggdb etc are intrusive flags which are expected to
be set by the user. 'CXXFLAGS?=' only sets these if there is no
CXXFLAGS in the env.

benhj/knoxcrypt,benhj/teasafe