I had missed one: the "watch" end of the postmaster pipe also needs FD_CLOEXEC.
pgsql-hackers by date:
Соглашаюсь с условиями обработки персональных данных