> Using openssl with a wrapper service?

Coincidentally, one of tailscale's founders already built this: https://github.com/sshuttle/sshuttle

They have been trying to create or reinvent the database rather than using tried and true solutions. The analogue would be rolling your own cryptography.