close all extraneous open file descriptors when entering sandbox