Updated the list of header fields that must be protected by DKIM

Also marked another section to be completed and removed an obsolete
comment.
IMAP can't be used for User/UA Capabilities Registration