I don't think this is BES related at all... because even when set up with SQL authentication BES doesn't use the sa account. It would use the BES service account. (besadmin, or something like it.)
Unless you had BES connecting to SQL using the sa account... which would just be NUTS.