[nobody7290]

I think I am wrong (just read the manual again), also, due to the way BES10 works, a Mailbox for the service account seems not to be needed:
BES5: fetches mail/sends mail/PIM data with the besadmin account on behalf the user
BES10: only proxies requests for Active-sync but the credentials of the user are used