Use SOCK_CLOEXEC.

MFC after:	1 week