GCC and Clang can check that the % format strings are used with the proper
types. If they are not that can lead to security issues.

This cannot be added to global CFLAGS as it will issue an error when testing
for asprintf/vasprintf in AC_REPLACE_FUNCS().