This fixes issue #8. This MR is on top of !4.
Making the FDs cloexec prevents them leaking to child processes on fork+exec.