Hydrant::shutdown returned once the last Arc<Database> was gone, but fjall releases its lock file later: its drop first waits for its worker threads, and every keyspace handle holds the lock too. so an embedder that shut down and started again on the same path right away could find the database still locked. shutdown now also waits, within the same timeout, until it can take the lock itself.