* plugins/check_ssl_certs: avoid file descriptor leak