Implements a way for the CLI to wait until the IO streams from the SandboxService have been drained before closing them.

Follows the same pattern as apple/containerization#110

This change also performs some cleanup in the SandboxService.startProcess method - splitting the code paths to handle the init process and an exec'd process into two different private methods to make easier reading