Disable fd leak checking

Looks like some versions of valgrind have flaky support for this,
showing descriptors from the intermediate child created by
posix_spawn as leaking descriptors overall, even though they
are CLOEXEC.