That's the old method, if my hazy memory is serving me half right tonight, that will not permit recipient delimiter processing To accommodate that suggest using - -f ${sender} -d ${user}@${nexthop}
Ah interesting..! Is that perhaps why dovecot_destination_recipient_limit=1 was needed, here..?