spam scanning: default to add header
Currently spamfilter policies default to changing the subject, which breaks DKIM signatures, we should change the default behavior to adding a header. (Would affect mail that is scanned by ISPConfig then forwarded to another server/account.)