I believe the correct solution, for Debian servers, is to add the user Debian-exim to the daemon group.