mmap: set FD_CLOEXEC for file descriptors we keep open for mmap()