[exim] rate limit on local accounts?

We had a local account compromised (and of course.. ) send thousands of
emails out via our servers.. *sigh*..

I see that many people have asked about how to do this, and it seems
that the people that can do it, do not seem willing to give up an answer.

Is it possible?

Does it work?