Interface sqlExecer

server/server.go:2290–2292

sqlExecer is satisfied by both *sql.DB and *sql.Conn, allowing StartCredentialRefresh to work with either a connection pool or a pinned connection.

	if dlCfg.S3Endpoint != "" {
		secret += fmt.Sprintf(",\n\t\t\tENDPOINT '%s'", dlCfg.S3Endpoint)
	}

	// SESSION_TOKEN is ALWAYS emitted, even when empty: httpfs copies a host
	// AWS_SESSION_TOKEN env var into the global s3_session_token setting at
	// extension load (AWSEnvironmentCredentialsProvider::SetAll), and a secret
	// that omits the key falls back to that setting at request-signing time