Allocate daemon listening ports

Mark the daemon listening ports as allocated in the `portallocator` in order to prevent containers from exposing this port themselves. This can be significant if #9078 gets merged as conflicting containers exposed port may no longer yield a bind error.
I don't see how can be `err == nil && intPort != allocatedPort`.