open: don't silently ignore unknown O-flags in openat2()