Don’t get so distracted by DKIM and SPF that you forget the most important DNS record (and you don’t even need SPF on a shared Marketo instance!)
Everybody thinks they need DKIM and SPF for their From: domains. DKIM? Sure, do it. SPF? Nope, and it can even be destructive. But both distract from the main need: an MX record + mailbox for every From: address. →