Since exim is currently stuck in the perl 5.12 transition it is a very good idea to add "warn control = dkim_disable_verify" at the beginning of the rcpt acl on systems running testing. This will prevent attacks based on CVE-2011-1764.