Okay so biggest question for this is how we should handle re-opening it in the child process. Will the urandom_fd get reset when CLOEXEC fires or will it be an int referencing an invalid fd?