supports SMTP authentication - that is, users can bypass the blacklist listing by authenticating via SMTP AUTH
supports sender address verification or sender callbacks (see milter-sender) - most SMTP callbacks are made using the null-envelope sender address. When we see this, we defer our blacklist checks until the SMTP DATA stage (or xxfi_data() callback in Sendmail 8.14.0+'s milter API)