caldav: redirect users to a homeset in @internal for now
http_caldav: seriously, check the admin flag correctly
dav: lock mailbox in copy (presumably also move)
no need to lock on read, we've got the mailbox locked