kbuild: fix up CFLAGS usage