> I understand DKIM signing needs to be as late as possible - is there > an amavisd way to get around this challenge? "score KAM_DMARC_REJECT 0" via sa_userconf_maps on the MYNETS policybank, maybe?