Add options dnssec_request_domains, dnssec_require_domains to the smtp transport