Set FD_CLOEXEC on all sockets + centralize the fcntl() calls