The Dovecot quota policy service resides on the backends, so we have
to use postfix-policyd-proxy to get there. Runs with local UNIX
sockets, one per Postfix instance (using a systemd multi-instance
service template).