Update PIE section
Guidelines for Position Independent Executables gave the impression that
PIE is opt-in. This has not been true since Harden All Packages change
happened in Fedora 23.
To match the fact that PIE is the default, the guidelies are updated to
discuss the opt-out instead of opt-in.