well.. to report back there are minor nits in the docs about "how to do it" but I succeeded in getting DKIM/SPF done, and google and pobox both honoured it for delivery which is something. (I used the google postmaster doorway to prove control of the domain)

I think this approach may be viable.