Always set O_CLOEXEC in an MT-safe way