libkvm: Make second /dev/null file descriptor close-on-exec as well.

MFC after:	1 week