On Debian, exim4 requires key be 640 owned by root:Debian-exim. Relaxing the permission check to permit also 640 allows me to use the same file for both samba and exim4 without compromising security, thank you
*** This bug has been marked as a duplicate of bug 10392 ***