How does mailman authenticate messages to verify that the sender is a member of the list? Does it use the From header, the Sender header, or the SMTP envelope? Is this configurable?