Database drivers as external processes

About three months ago I added support for plugin drivers outside the Tabularis process. External drivers are ordinary programs speaking JSON-RPC over stdin/stdout. This is a retrospective on why that design held up, where it leaked, and the credential bug hidden in a HashMap insert.