Use CLOEXEC for files and sockets