Resolved! Permissions requirements for the VSA changed at some point?
According to this article http://www.symantec.com/docs/TECH76700: The VSA’s requirements in Exchange The VSA requires full access to all mailboxes and public folders. The powershell script SETEvExchangePermissions sets these rights, only it doe...