the maildrop program was made setuid purely to support access to the courier authlib socket. but if maildrop was built w/USE=-authlib, that requirement doesn't make sense, and so making it setuid is pointless.
Fixed in mail-filter/maildrop-2.8.3