KCFLAGS is too late for gcc flags detection logic. So embed the
-fno-pie flag directly to CC. This fixes the error:
Cannot use CONFIG_CC_STACKPROTECTOR_STRONG: -fstack-protector-strong not supported by compiler