db-no-create--watch     `interimap --watch` refuses to create the database
db-exclusive-lock       mutually exclusive DB access

. DB schema upgrade (v0 -> v1)
    db-upgrade-0-1                              migrate
    # may happen if the server(s) software or its configuration changed
    db-upgrade-0-1-delim-mismatch               abort on hierarchy delimiter mismatch
    # foreign key checking was broken until v0.5
    db-migration-0-1-foreign-key-violation      abort on foreign key contraint violation

. Mailbox deletion
    ... delete

. Mailbox renaming
    rename-exists-db        abort if target exists in the DB
    rename-exists-local     abort if target exists locally
    rename-exists-remote    abort if target exists remotely
    ... rename-simple
    ... rename-inferiors

# try values beyond the signed integer limit
largeint  Large UIDVALIDITY/UIDNEXT/HIGHESTMODSEQ values

. Mailbox synchronization
    ... sync-mailbox-list
    list-reference      list-reference
    list-mailbox        list-mailbox = foo "foo bar" "f\\\"o\x21o.*" "f\0o\0o"
    list-select-opts    list-select-opts = SUBSCRIBED
    ignore-mailbox      ignore-mailbox = ^virtual(?:\x00|$)
    delimiter-change    doesn't choke on delimiter change

resume  Resume when aborted
repair  --repair

. Authentication
    auth-sasl-plain         AUTHENTICATE (SASL PLAIN)
    auth-sasl-plain-no-ir   AUTHENTICATE (SASL PLAIN, no SASL-IR)
    auth-login              LOGIN
    auth-logindisabled      LOGINDISABLED
    auth-noplaintext        abort when STARTTLS is not offered
    preauth-plaintext       abort on MiTM via PREAUTH greeting

compress    COMPRESS=DEFLATE
condstore   CONDSTORE
split-set   Split large sets to avoid extra-long command lines

. SSL/TLS
    starttls-logindisabled  LOGINDISABLED STARTTLS
    starttls                STARTTLS
    starttls-injection      STARTTLS response injection
    tls                     SSL/TLS handshake
    ... tls-verify-peer
    tls-pin-fingerprint     pubkey fingerprint pinning
    tls-rsa+ecdsa           pubkey fingerprint pinning for dual-cert RSA+ECDSA
    tls-sni                 TLS servername extension (SNI)
    tls-protocols           force TLS protocol versions
    tls-ciphers             force TLS cipher list/suites

. Live synchronization (60s)
    sync-live            local/remote simulation
    sync-live-crippled   local/remote simulation (crippled remote)
    sync-live-tls        local/remote simulation (TLS remote)
    sync-live-multi      local/remote1+remote2+remote3 simulation (3 local namespaces)

. pullimap
    ... pullimap