The exim-sa package is an old method for allowing SpamAssassin to be run on incoming mail at SMTP time. It is deprecated in favour of the built-in ACL support for content scanning.