Validate SPF and DMARC TXT records for RFC 7208 10-DNS-lookup limits and p=reject/quarantine spoofing protection.