+ /*XXX We used to "break" here if dkim_verify_minimal, but that didn't
+ stop the ACL being called. So move that test. Unfortunately, we
+ need to eval all the sigs here only to possibly ignore some later,
+ because we don't know what verify options might say.
+ Could we change to a later eval of the sig?
+ Both bits are called from receive_msg().
+ Moving the test is also suboptimal for the case of no ACL (or no
+ signers to check!) so keep it for that case, but after debug output */