Two per-account settings. noJunkFilter bypasses rspamd for that recipient
with want_spam, which also suppresses the X-Spamd-Result header that
extended_spam_headers adds to every scanned message, and gives the account a
sieve of fileinto "INBOX"; stop; to cancel the server-wide junk after-script.
purgeDownloaded runs mail-purge on activation and every five minutes: Junk
drains back into INBOX with \Seen cleared first, every read message is
expunged (POP3 RETR sets \Seen), and Sent, Drafts and Trash are emptied
unconditionally. The maildirs are excluded from the borg backup, so expunged
mail does not live on in the archives.
rspamd's redis history is off: it stored the subject, sender and recipients
of every scanned message, submission included.