Generate RFC 7208 compliant SPF records for email authentication
If disabled, we'll create a restrictive record to prevent spoofing