s3: use PICFLAG instead of PIE_FLAGS