I made a patch for qmail-1.03 that inforces tls for smtp. It applies on top of the ohter patches that the qmail-1.03-r13.ebuild. It will still allow local mail and hosts in rcpthosts to relay without auth/tls.
Created attachment 38018 [details, diff] force tls patch (belongs in the files dir)
Created attachment 38019 [details, diff] patch for qmail-1.03-r13.ebuild
i'm not going to accept this patch. there are other much better ways for you to get what you want, see the -r15 ebuild. and they are much more configurable.