master
firewall: config: drop input traffic by default
treewide: add support for "lto" in PKG_BUILD_FLAGS