Thinking about this further. I didn't want to mention it before, but feel it worth noting now that DKIM would probably be a better security authentication method that SMTP+AUTH, since it avoids the need for the rep. server maintaining a huge list of AUTH username/password pairs of subscribers.