DKIM: more care over untrustworthy data during verify