This really doesn't have much to do with security.  DKIM checking is advisory anyways so we probably don't want people to rely on it.