One condition to lose emails is that config.ini additionally has
```
[main]
error_messages_to = user
```

If this is set to "both" or "dispatcher" the bounce will go to the
dispatcher unencrypted.