Build as PIE

wiki/build.md

@@ -1,7 +1,7 @@
 ## Building
-Official binaries are stripped of debug info for size and built without CGO (except for distribution packages) for portability, as follows:
+Official binaries are built without CGO (for portability), built position-independent (for security, allows [ASLR](https://en.wikipedia.org/wiki/Address_space_layout_randomization)), and stripped of debug info (for size reduction), as follows:
 ```
-CGO_ENABLED=0 go build -ldflags="-s -w" -trimpath -tags=stxAll ./mutn.go
+CGO_ENABLED=0 go build -buildmode=pie -ldflags="-s -w" -trimpath -tags=stxAll ./mutn.go
 ```
 
 Additionally, some custom build tags can be used to create different binaries. The following tags are not used in official builds: