Just an update for anyone who comes across this in the future. In the end I had to give up on SpamPD and use a combination of PostFix + SpamD instead. This works better, faster, safer, more consitently and is actually not that horrible to setup!