dkim: check for higher level DKIM keys when signing

for example, when a message is being sent from mail.example.com, also
check for an example.com signing key.
dkim docs: formatting fixes