Merge changes I5fd4b49c,Ibf7e5259

* changes:
  Mark open() as deliberately not O_CLOEXEC.
  odsign: Don't initialize if we can't find a Keymaster.