Bugfix: Don't close base images prematurely

[lmbarros]

This still needs some more testing and thinking, but looks like the right move!

Our previous implementation was closing the base image stream before it was even used. With this commit we make it clear who is responsible for closing this stream, and ensure it is closed only after it's used.

Very likely to help with #444