The script already determines the correct user for sa-compile a few lines earlier (which is not necessarily debian-spamd – the user may have overridden it via dpkg-statoverride, cf. spamassassin.postinst), so let’s use that for the recursive chown as well.