Enable close-on-exec flag for all incoming fds

Signed-off-by: Jonathan Rudenberg <jonathan@titanous.com>