[exim] rcpt acls not working properly

Hi
I had the follow acls , that worked fine,

!authenticated = *
!hosts = localhost : 192.168.199.253 : 192.168.200.240 : 192.168.29.251
: 127.0.0.1 : 192.168.2.0/24 : 192.168.1.0/24
!sender_domains = +local_domains

then I changed them for (asper the faq example)

 accept hosts = localhost : 192.168.199.253 : 192.168.200.240 : 
192.168.29.251 : 127.0.0.1 : 192.168.2.0/24
 accept authenticated = *
 deny domains = !+local_domains
      message = Relaying denied
 require verify = recipient

now even my local lan needs to authenticate .. surely if "accept host"
is before "accept authenticated" the local lan / hosts shouldn't need to
authenticate ?

Greg