test/model's main test tool currently opens WiredTiger directly within its top-level process, in run_and_verify. The tool should do the verification in a child process in case the verification hits an assertion, which if happens, breaks counterexample reduction.