opendir-safer.c: don't clobber errno; don't close negative FD