What are the best practices for configuring the exim editor?

Has anyone written a reliable, secure tutorial on which options to check?

For example, I'm tempted to turn on:
"Sender Verification Callouts"
but since it's disabled by default, I'm scared to turn it on and have trouble with email.

Others I'd consider but don't know the ramifications:

"Show Generic Recipient Failure Messages to senders."
Is generic safer or will it just frustrate the legitimate senders more?

RBL: bl.spamcop.net
as well as the other two. I remember hearing horror stories about RBL's, but not in awhile. Have they worked out their issue?

Do you guys have these options on in your servers?

 

Thanks. I just turned it on, will be interesting to see what happens