keyword addresses requiring confirmation

I setup TMDA and TMDA.cgi and everything seems to be working good with 
confirmation, auto-whitelisting of outbound addresses and incoming 
filter checks against whitelist and confirmed addresses.

However, when ever I create a keyword or dated address (via command 
line or tmda-cgi) it gets send back to the sender asking for 
confirmation.

I don't see anything in my debug logs or see any other errors.  Any 
ideas?

Here is what my incoming log says:
Date: Mon, 29 Jan 2007 21:19:18 -0500
From: "Philip Jenkins" <[email protected]>
   To: [email protected]
Subj: test 3
Actn: CONFIRM (from * confirm)                                          
(2006)

Date: Mon, 29 Jan 2007 21:19:18 -0500
From: "Philip Jenkins" <[email protected]>
   To: [email protected]
Subj: test 3
Actn: CONFIRM pending 1170123558.18232                                  
(2006)

Here are my configs:
Incoming
---
from-file ~/.tmda/lists/whitelist ok
from-file ~/.tmda/lists/confirmed ok
from-file ~/.tmda/lists/blacklist drop
headers '^In-Reply-To:(.|\n)*<4.*@.*>' ok
headers '^References:(.|\n)*<4.*@.*>' ok
headers '^In-Reply-To:(.|\n)*<.*\.TMDA@.*>' ok
headers '^References:(.|\n)*<.*\.TMDA@.*>' ok
headers "^X-Habeas-SWE-3.*like Habeas SWE \(tm\)" ok
headers "Received-SPF: fail" hold
headers "X-Spam-Level: \*\*\*\*\*\*\*\*" hold
body "filename\=.+\.(pif|scr|exe|bat|com|cmd|vbs|js|rar)" hold
from * confirm

config file
--------
MAIL_TRANSFER_AGENT = "postfix"
RECIPIENT_DELIMITER = "-"
DELIVERY = "~/Maildir/"
BARE_APPEND = "~/.tmda/lists/whitelist"
CONFIRM_APPEND = "~/.tmda/lists/confirmed"
LOGFILE_INCOMING = "~/.tmda/incoming.log"
LOGFILE_OUTGOING = "~/.tmda/outgoing.log"
LOGFILE_DEBUG = "~/.tmda/logs/debug"
os.umask(027)
FULLNAME = "Philip Jenkins"
CONFIRM_ADDRESS = "[email protected]"


and /etc/tmdarc
------
CRYPT_KEY_FILE = "~/.tmda/crypt_key"
CONFIRM_APPEND = "~/.tmda/lists/whitelist"
DATADIR = "~/.tmda/"
PENDING_WHITELIST_APPEND = "~/.tmda/lists/whitelist"
PENDING_BLACKLIST_APPEND = "~/.tmda/lists/blacklist"
FILTER_INCOMING = "~/.tmda/filters/incoming"
FILTER_OUTGOING = "~/.tmda/filters/outgoing"
HOSTNAME = "i-fortress.net"
ALLOW_MODE_640 = True
TEMPLATE_DIR = "/etc/tmda/"
CGI_URL = "http://tmda.i-fortress.net/tmda.cgi"