You should likely use <security><application/></security> to have the pool split on the CRI object.
The ERROR sounds to me that you aren't releasing the connections back to the container again. Check the JackRabbit API for that.
You should also use the latest nightly snapshot.