Access to the /etc/shadow system password filerequires root privileges. The Postfix SMTP server(and in consequence libsasl linked to the server) runswith the least privilege possible. Direct access to/etc/shadow would not be possible without breaking thePostfix security architecture.