Set FD_CLOEXEC on all the main FDs

Specifically, the listening socket needs to be CLOEXEC or it will
belong to any running child processes. Which means THEY will be
listening as well on that port when we exit.