Audit ioctl usage

[rcgoodfellow]

In PR #18 we fixed a few problematic forms of UB involving ioctl calls. But we need to more comprehensively audit ioctl usage to ensure that other instances of UB do not creep in. Specifically, the ioctl_ro may be a bit of a foot gun and should get further thought.