- set CLOEXEC on fd duplication