Hardening the C++ Standard Library at scale