I think the internet.nl email test should permit not having _domainkey records when DMARC policy is reject and SPF is -all. It currently doesn't pass for a domain properly configured to disallow sending email. Can't check that DKIM is always used anyway.