"deliver" yelding permission denied errors after upgrade to 2.2.3

[Andreas]

I upgraded my cyrus-imapd-2.1.16 installation to 2.2.3 and I think I took
all the appropriate steps outlined in the documentation regarding this
upgrade: I converted the databases where appropriate, changed ctl_deliver -E
to cyr_expire -E, converted my sieve scripts and changed tls_service_* to
service_tls_*.

Now, whenever I run /usr/lib/cyrus/deliver, I get, in addition to the email
being delivered:

(...)
Feb 26 13:41:14 pandora deliver[4492]: DBERROR: dbenv->open '/var/lib/imap/db' failed: Permission denied
Feb 26 13:41:14 pandora deliver[4492]: DBERROR: init() on berkeley
Feb 26 13:41:14 pandora deliver[4492]: DBERROR: reading /var/lib/imap/db/skipstamp, assuming the worst: Permission denied
Feb 26 13:41:14 pandora lmtpunix[3690]: accepted connection
Feb 26 13:41:14 pandora lmtpunix[3690]: lmtp connection preauth'd as postman
Feb 26 13:41:14 pandora lmtpunix[3690]: mystore: starting txn 2147483951
Feb 26 13:41:14 pandora lmtpunix[3690]: mystore: committing txn 2147483951
(...)

What is this "permission denied" about? It goes away if I make /var/lib/imap/db writable by
my user, so why is "deliver" accessing it directly? Isn't it supposed to just deliver the message
via lmtp? Did I miss something in the documentation?

I'm running deliver in this way (as user "andreas"):
/usr/lib/cyrus/deliver -a andreas andreas < test.mbx

"test.mbx" contains a single message.

Only deliver.db and tls_sessions.db are in berkeley format (DB 4.2.52). My imapd.conf is not
changing the default backends:
pandora [/var/lib/imap] > file annotations.db deliver.db mailboxes.db tls_sessions.db user/a/andreas.seen 
annotations.db:  Cyrus skiplist DB
deliver.db:      Berkeley DB (Btree, version 9, native byte-order)
mailboxes.db:    Cyrus skiplist DB
tls_sessions.db: Berkeley DB (Btree, version 9, native byte-order)
user/a/andreas.seen: Cyrus skiplist DB


And there is a DB environment in /var/lib/imap/db.

Thanks for any help.
---
Home Page: http://asg.web.cmu.edu/cyrus
Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html