salt.modules.lxc: ensure lxc is running *before* call to seed.apply

Since the bootstrap script, keys, etc are seeded to /tmp, which may be wiped out on boot.

I thought I'd already committed this, but can't find any record of it...