This turned out to be a case of the build.sbt file breaking the program. The real app (not my sample app) used sbt-assembly to create a jar. There was logic to remove duplicates with MergeStrategy that was removing the MariaDB service files within the META-INF directory. Without those, the driver didn't know where to find the classes to work with caching_sha2_password.