save-cwd: don't leak a file descriptor when the caller execs