We're now enforcing DNSSEC for third-party hosted paymails.