Added a new class to be a W-rapper (aye!) which holds the Process object that holds the tunnel process.  This allows the connection handler to simply pass round a reference to this object, where as before I wrongly assumed how java's reference passing worked.

All fine now.  The processes get cleaned up when the user drops the connection.  No stray cmd processes are left about for the user to close manually, and probably closes a possible security problem too...