nginx-mail-mapper did the same, which should be enough to make password with %
work, note however that nginx escapes only " " and "%" in this case
(function ngx_escape_uri)

since we drop /etc/pam.d/dovecot the service name sent from pam is 'dovecot',
also nginx-mail-mapper has been integrated into authserv now.