Add wrapper so all sockets we create are CLOEXEC