[Exim] Rejecting Senders in an ACL

We have an email alias (for instance super_users@???). We only
want here.com users to be allowed to use this email alias. I am having
some trouble setting up an ACL to check that the sender is from the
here.com domain before sending it to this one particular alias.

Any suggestions will be greatly appreciated.
Thanks,
Joe Kezar