fix some more O_CLOEXEC/SOCK_CLOEXEC issues