Mark the socket an CLOEXEC to avoid leaking it around