Add the SOCK_CLOEXEC option to the accept4() call
This  ensure that a fork/exec call does not leak a file descriptor.