Can you "doveadm search" with mailbox location instead of a user (-u option)?