We were defer closing the IO for run/exec/start
fairly late in the container run cycle which had the
downside of that if the container run failed your tty
would be stuck in raw mode. This change just moves the
closing (return tty to origin state) to directly after
we create the IO.