selinux wants a clean fd set, so better close all open fds