Use O_CLOEXEC in tzfile handling