How does one verify that their server has never ever sent spam, for instance through a security breach?