plugin.py: Harden the Plugin.call() and Plugin.check_output() APIs

These APIs were passing along *args and *kwargs transparently to the
subprocess.Popen() API, which holds us hostage to supporting the underlying
python APIs.

Instead, we now define a strongly typed API with access to limited
keyword arguments which we propagate to the underlying python API.