lfp_mkostemp: avoid leaking the random source file descriptor