* shadow/lckpwdf.c (__lckpwdf): Use O_CLOEXEC if possible.