@jk-ozlabs reports that it would be much easier to debug at scale if the parsemail managment command exits 0 on "expected" failures - non-patch mail and X-P-H: ignore, but returns 1 if there's a genuine system error. Then postfix's tempfail system could be used to hold mail and give us a window to fix the bug before losing the patch.