I ran into the same problem, changing the perms did the trick but restarting dovecot will undo this.
my container already migrated from openvz to lxc, i made a snapshot backup and restored the backup to another server and encounter the problem there. only difference is that the 'old' servers...