Ensure that OpenSession does not keep circuits alive too long

From rend_request.rs

 // TODO (#1224): If we drop this handle, nothing will keep the circuit alive.
 // But we need to make sure we drop this handle when the other side destroys
 // the circuit.