set the SPF record after custom DNS records so that the SPF record doesn't prevent all custom TXT records from coming in