Add side channel socket for fd passing to agent handler
Clean up created fds in agents; don't pipe fds for errors; test open perms