WHM »Service Configuration »Mailserver Configuration
Allow Plaintext Authentication (from remote clients) = No
WHM »Service Configuration »Exim Configuration Manager
Require clients to connect with SSL or issue the STARTTLS command before they are allowed to authenticate with the server. = On