[exim] require in acl EXCEPT for a particular recipient

Hello everyone,

Suppose I want the following ACL to verify sender except for certain
recipient addresses (as you might guess, those are spamtraps):

So I converted this acl (called from within acl_smtp_rcpt):

acl_nsvdom:
        accept condition = ${lookup {${lc:$sender_address_domain}}
partial1-lsearch {/etc/domeny/wildcard_whitelist_domains} {yes}{no}}
        require verify = sender/callout=120s,defer_ok
        control = no_callout_flush
        accept

to this:

acl_nsvdom:
        deny
                condition = ${lookup {${lc:$sender_address_domain}}
partial1-lsearch {/etc/domeny/wildcard_whitelist_domains} {no}{yes}}
                !recipients = +spamtrap_recipients
                !verify = sender/callout=120s,defer_ok
        accept

where

addresslist spamtrap_recipients = lsearch;/etc/domeny/spamtrap_addresses

is defined in the main section.

Yet, I am still getting 550:

ehlo o
250-da7.domeny.com Hello domeny.pl [87.204.147.140]
250-SIZE 31457280
250-PIPELINING
250-AUTH PLAIN LOGIN
250-STARTTLS
250 HELP
mail from: 4324234dfdfdaaffadadfa@???
250 OK
rcpt to: some@???
550-Verification failed for <4324234dfdfdaaffadadfa@???>
550-Unrouteable address
550 Sender verify failed


--
Marcin Król