Add more restrictive oflag checks to sys_open