Two-phase expunge (2)


Extended quotas limit amount of deleted email
greatest of 28 days and 100MB
expire job runs overnight
on demand if deletion quota exceeded

Side-effect improvements
better performance
    expunge is just a change to index contents
    heavyweight filesystem ops happen at night
concurrent access works better, e.g.
    one user deletes message, other downloads it
helpful for replication