Default to buildmode=pie on Linux

[qmuntal]

We already require a dynamic loader to load OpenSSL, so switching defaulting to PIE mode won't be that much of a breaking change. This needs further investigation, and possible an ADR.

Related to #104