Daemon: don't clear CLOEXEC on daemon sockets