This encapsulates the input array, hiding it from the parser's methods.
Access is forced to go through `advance` and `consume*` methods on the
new `Input` object. The aim is to make it harder to have errors like
https://github.com/sandstorm-io/capnproto/pull/270