[Exim] deny and require in acl

What's the difference between:

deny !verify = sender

and

require verify = sender