Perhaps I'm picky. But I'd suggest changing the lock file
to be /mail/box/$user/Lock

Then it'd be clear that it does not refer to mbox in particular.

Thanks for the fix anyway.