Based on this one example program I looked at (twisted), it looks like you should get `fcntl(urandom_fd, F_GETFD)` first and OR that with `FD_CLOEXEC`.