[Exim] SMTP AUTH obsurification?

I seem to remember once someone posting a way of recording the ID that
was used for an SMTP AUTH session in the headers of a message, but
hashing it in some way that hid the data from immediate view, but which
the admin could decode using a secret key.

I've search around, but am unable to find anything on this.

Anyone here know where I can find this info?