Well, maybe the thing I thought would be very stupid isn't so stupid after all. In doas.conf:
permit nopass smtpd as mlmmj cmd /usr/bin/mlmmj-receive permit nopass smtpd as inboxen cmd /usr/bin/public-inbox-mda And then in the ~/.forward file for those two users, "| /usr/bin/doas -u USERNAME COMMAND" -- Chris