Defer run.st to user container.
Wrap VNC connection in websockify.
Remove duplicate install instruction.