Disable widen_domains when verifying senders, unless rewrite_headers is