[PATCH 3/5] util: Add missing O_CLOEXEC for !HAS_GETRANDOM path