We need a way to express which sender/recipient pair a given XHASHCASHAUTH is authenticating, in the case of multiple RCPT TO. The verifying server could calculate MAC for all recipients and try to match each an every one but that feels a bit annoying.