tca: Close all file descriptors except for the ones we want to keep open

This required hard-coding the file descriptor which we want to keep
open, which we already did in tps and Tails Installer and should not be
an issue.