Add cfi_diag build flag.