Ensure the sockets we inherit from init are FD_CLOEXEC.

Bug: 65104811
Test: bullhead builds, boots
Test: lsof of iptables-restore doesn't show /dev/socket/netd and friends

(cherry picked from commit 548bbd46)

Change-Id: Ic360b756729176a47fd2d04940913f098cf0e9b6