util: don't leak file descriprots to third-party tools

https://github.com/containers/container-selinux/issues/68


Cc: Adrian Reber <areber@redhat.com>
Signed-off-by: Andrei Vagin <avagin@gmail.com>