PSA for any admins/consultants out there: In 2017.1 NetSuite started including transaction emails for DMARC compliance and did NOT include this info in the release notes. This can result in emails from transactions/scripts/workflows that used to be just fine being rejected if you don't have your DKIM setup complete.