Hi,
As the problem is widely spread, and in my cas the suhosin compatibility matters, why not work on it at the roundcube level ?
I did not read RC code, but, maybe someone has ideas on where to patch against to use suhosins encrypted sessions ? Or maybe I'm so dumb I didn't see it has been corrected already ?