DKIM: For the benefit of ADSP and DMARC (not yet impl), each sending domain should be its signing domain
add ADSP and DMARC records; see #14