Older versions of GCC appear to report these with the current standard
option set, newer versions need -Wformat-security.