This is useless here because recipient_bcc_maps are handled by cleanup(8) and not smtpd(8). You need to use a different cleanup(8) instance which overrides the default bcc maps setting for mail coming through this special smtpd(8) listener.
Cool! So i wrote this, and working! Thank you! smtps inet n - n - - smtpd -o smtpd_tls_wrappermode=yes -o smtpd_sasl_auth_enable=yes -o mynetworks=0.0.0.0/0,[::]/0 -o smtpd_client_restrictions=permit_sasl_authenticated,reject -o cleanup_service_name=cleanup2 cleanup unix n - n - 0 cleanup cleanup2 unix n - n - 0 cleanup -o recipient_bcc_maps=
smime.p7s
Description: S/MIME Cryptographic Signature