fix file pointer refcounting

We now grab an additional long-term reference on open/dup thay stays
for the lifetime of the file descriptor.

The semantics of the global falloc/falloc_noinstall/etc functions matches
those of FreeBSD now.

As pointed out by Guy.