get urandom fd flag and bitwise OR it with FD_CLOEXEC. comment update