Oxidation of nanopores in a silicon membrane: self-limiting formation of sub-10 nm circular openings