Excellent! There has been some interesting discussion in bugzilla about this issue. I am glad they will modify this for FC4. Having to include mysql and postgresql just to use dovecot is major bloat for most users and IMHO a security risk. It will make security audits more difficult since unused packages are included and adds just that much more code that could have an exploit in it.
You are overstating the security risk of a single library package that is unused.
Warren
