Tool Labs: Fix exim4 config

Turns out, exim4 is trying to be too secure and ends up
being less secure as a consequence: it drops privileges too
early to switch to the destination user when evaluating
the routing stanzas, preventing access checks with the
user privileges for .forward.

Change-Id: Id444ec14e4ed4b687dbaf1f1f092489cafdb7bfb