Read-only mboxes seem to be working nicely now, so I installed latest CVS Dovecot to dovecot.org again to serve them. Allows either ANONYMOUS SASL logins, or plaintext logins with "anonymous" user and empty password.