[exim] logwrite strangeness

Admittedly, I'm making exim do horrible and unspeakable things with
databases, but it all works, except one thing. The logwrite statement
attached to the ACL that rejects mail (first one below) fires for just
about every email that comes through. The logwrite statement in all of my
other ACL's only fire when that ACL happens. I was under the impression
that logwrite only triggers when the condition of the ACL is true, but
that isn't what I'm seeing.

BTW, I'm running 4.42 on FreeBSD 5.

Many thanks,

Jerry

deny   message = This message scored $spam_score spam points.
       logwrite = Message rejected as spam. $recipients $spam_score_int
       condition = ${if >{$spam_score_int}{${lookup mysql{select
spam_reject_threshold from domain where domain_name = '${acl_m0}'}{
$value}fail}}{1}{0}}
       spam = nobody:true
       sender_domains = !+whitelist_from_domains

warn  message = X-New-Subject: *SPAM* $h_Subject
      condition = ${if >{$spam_score_int}{${lookup mysql{select
spam_flag_threshold from domain where domain_name = '${acl_m0}'}{$va
lue}fail}}{1}{0}}
      spam = nobody:true
      logwrite = Message tagged as spam. $recipients $spam_score_int

deny
    message     = Your message does not conform to RFC2822 standard
    log_message = message header fail syntax check
    !verify     = header_syntax

deny message = Virus infected message (or spam)
  condition = ${if match{$h_date:}{--}{yes}{no}}
deny    senders = :
     message = A valid sender header is required for bounces
     !verify  = header_sender
require verify  = header_syntax

deny  message = Found MIME error ($demime_reason).
     demime = *
     condition = ${if >{$demime_errorlevel}{2}{1}{0}}

deny message = $sender_host_address is not allowed to send mail from
$sender_address_domain
spf = fail
accept