I ended up with rewriting the header-field in the receiving (final) mailserver, replacing * with +.
Something like the following:
- In PMG, add a rule that adds __SPAMSTARS__ to the X-proxmox-Spam-Level header-field.
- in exim, add a data-ACL (acl_check_data, or via CHECK_DATA_LOCAL_ACL_FILE)...