[throw0101a]

If you run a mailing list you generally have to worry about ARC (re-signing 'chain of custody') in addition to DKIM:

* https://en.wikipedia.org/wiki/Authenticated_Received_Chain

I've found ARC to fiddle some to get going than ARC.