do the open-source thing w/o larding up the source code.
fd's CLOEXEC bit when they become unrevealed/revealed.