Running database drivers as sandboxed external processes (and why a HashMap insert was a security boundary) (opens in new tab)

About three months ago I added support for plugin drivers outside the Tabularis process. External drivers are ordinary programs speaking JSON-RPC over stdin/stdout. This is a retrospective on why that design held up, where it leaked, and the credential bug hidden in a HashMap insert.