We rely on dpkg-buildflags to set -O2, but that may not be available on the target system. Explicitly set -O3, and also enable LTO. Change-Id: I593ec7ead08cb0a47922ba4db684b0292647f2bc