[exim] Options for authenticating against /etc/shadow (PAM) …

Hi there,

What are my options to auth against /etc/shadow using PAM without giving
exim too much priviledges?

I currently have two options: chgrp exim /etc/shadow or write an
external authenticator (which is suid root) that returns a
true/false which I can evaluate in exim.

Any other ideas?

- Jaco van der Schyff
jaco-spam@???