close stdin in the verifier

We don't use it and this opens the way to more aggressive sandboxing of the
remaining I/O streams (stdout and stderr) should we want to.