[Libguestfs] [nbdkit PATCH v2 12/17] filters: Set CLOEXEC on files opened during .config