Do not use security flags by default (#4770)

(cherry picked from commit 697bbbd3c6)

configure

@@ -1338,8 +1338,7 @@ Optional Packages:
   --with-reports-hostname=HOSTNAME
                           Use HOSTNAME as hostname for statistics collection
                           and update checks
-  --without-security-flags
-                          do not use security flags
+  --with-security-flags   use security flags
 
 Some influential environment variables:
   PG_CONFIG   Location to find pg_config for target PostgreSQL instalation
@@ -4546,7 +4545,7 @@ if test "${with_security_flags+set}" = set; then :
   esac
 
 else
-  with_security_flags=yes
+  with_security_flags=no
 
 fi
 

configure.in

@@ -216,8 +216,8 @@ PGAC_ARG_REQ(with, reports-hostname, [HOSTNAME],
 AC_DEFINE_UNQUOTED(REPORTS_BASE_URL, "$REPORTS_BASE_URL",
                    [Base URL for statistics collection and update checks])
 
-PGAC_ARG_BOOL(with, security-flags, yes,
-              [do not use security flags])
+PGAC_ARG_BOOL(with, security-flags, no,
+              [use security flags])
 AC_SUBST(with_security_flags)
 
 if test "$with_security_flags" = yes; then