Add O_CLOEXEC to safeopen(), and remove fd_set_close_on_exec().

After auditing the four calls using this function, it's clear that none
of these fd's are ever meant to leak to a fork()'d process.