The dovecot bump to 2.3.1 caused the dovecot service to fail to start because it would try to chgrp sockets to dovecot whereas our default dovecot group is called dovecot2.