assume scripts are running as root, dont sudo everything
DNS, SPF, and DKIM