Add support for limiting file desciptors accessed indirectly from collections.

To support this, there are three annotations:

__soaap_limit_fd_key_syscalls(fdkey, syscalls...) - limits the fd key to the list of syscalls
__soaap_fd_getter - function returns an fd using a key
__soaap_fd_setter - function stores an key,fd pair