http://gsexdev.blogspot.com/2007/04/tracking-permission-changes-to-mailbox.html
This is a cool looking script from Glen that would work quite nicely with the steps in my auditing doc http://blogs.flaphead.dns2go.com/archive/2007/04/04/auditing-within-exchange-200x.aspx