Set FD_CLOEXEC on open file descriptors