Now that we don't use satellite config anymore it can make a
difference.

But accept local recipients from local (not TCP/IP) and loopback SMTP
connections only.

Replace common.exim with a specialized router.  This enables meaninful
sender and recipient verification, because all addresses aren't
routable anymore.  And doesn't put mailing list load on our redirector
service.

We'll need substitutions in the following.