Fix: libcib: properly handle temporary file

Before, fchown() could be attempted on a negative file descriptor,
crm_perror() could be called after the relevant errno had been lost,
and a temporary file descriptor was never explicitly closed.