clang add ret protector options as no-ops