In Lwt_unix there is val socket : socket_domain -> socket_type -> int -> file_descr.
In Unix there is val socket : ?cloexec:bool -> socket_domain -> socket_type -> int -> file_descr.

The unix wrapper should expose the cloexec parameter.