How about allowing admins to diagnose webmail problems and abuse more or less the same way we can diagnose abuse from an SMTP connections by logging the IMAP portion of Webmail activity.  SmarterMail already logs IMAP activity from other IMAP connections (email clients doing IMAP, mobile devices, etc.) right?  Why not log the same activity from webmail???  This seems so logical to me that it's difficult for me to understand why this wasn't implemented from the beginning.