Using O_CLOEXEC by default, and returning Fd handles to ensure they get dropped on bail!() or panic!() if the RawFds aren't used yet. Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>