Close fds before the child process is executed

all file descriptors except 0, 1 and 2 are closed before the child
process is executed. (Unix only)
Merge branch 'master' into 1188-int
Add changelog re #1188, fixes #1188