some MUAs will not only bypass the local enqueuer, but also forget to
strip the BCC header when sending the DATA part of the SMTP transaction.

force smtp sessions to ignore these headers