Use O_CLOEXEC (inheritance is unlikely)