Access file descriptors under lock, and set to -1 on close. This
avoids confusing errors if Close() is doubly called