> You could periodically reset them in case they still get infected.

Just have them rebuild themselves from ROM after each processed mail :)