Public search query: dkim-signature header stripped by outbound relay so verification fails downstream