Merge "Use O_CLOEXEC when opening cgroup fds." into jb-dev