DKIM: Wrap signature header (more) in line with RFC 5322 and RFC 4871