See summary. This is Linux-only, but useful when sending file descriptors around to ensure that they're not leaked