[Exim] how to relay w/ passwd only

the goal is to require an id/pass for any email send/relay (even if it
is being sent to or from the domain that exim is servicing)

tried taking all hosts/domains out of local_domians and got the error
lowest numbered mx is localhost

can someone please provide some info to get me going down the right path?