CMake: better compile flag control

14 jobs for update_deps in 9 minutes and 42 seconds (queued for 2 seconds)