A postinstall script in the dovecot rpm allows local users to read the contents of newly created SSL/TLS key files.
"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-44988.json"