Note: Starting with version 2.0 dovecot needs an dedicated user/group for unprivileged login processes called 'dovenull'.