qmail should install an env.d entry to CONFIG_PROTECT /var/qmail/control and /var/qmail/alias ... and the qmail entry in make.globals should be removed ...
In place for upcoming -r11 of qmail.