The problem is that the defaults are updated regularly as new broken
software is released. They even change between releases, because I may
need to make the change and ship it right away to a particular victim. To
allow postmaster or other "sensitive" userid, you should probably replace
the filter completely rather than make assumptions on the standard
filters.
Eric