So after being scared by the SUR process and thinking about it more, would it be possible to do this instead:
-Take a snapshot every night and backup. In case of catastrophic failure, you can always roll back all of /var/opt/scalix to the snapshot.
-In case a user deleted messages or had corrupted containers:
1) Restore snapshot of /var/opt/scalix to an *alternate server*. (Alternate server has same /opt/scalix software installed.) Then start scalix on alternate server.
2) Connect to alternate Scalix system with user's email client, and copy over messages to original Scalix server.
3) Disconnect. Stop scalix on alternate scalix server.
Basically, you'd have a standby scalix install on another system that you can restore.. this lets users copy over messages easily if they ever delete messages.
Would this kind of system work?