7) I am running Dovecot and while I noticed the use CRAM-MD5 for password, it appears when backups are ran its able to retrieve the password to include in the archive? it looks something like this in the PBKP_CONTENT file of backup archive:
<hash>{CRAM-MD5}somemd5hash</hash><passwd>removed</passwd>