That's how nixpkgs-unstable is now, so to be compatible with both we have to force that setting. Use systemd tmpfiles to provision directory with correct owner.
As part of #61 this moves DKIM handling from rmilter to OpenDKIM.