You are on the right track when the mail server itself signs emails. This will certainly help keep things dry, especially if you have more than one application using the same mail server.
I learned the same with Cake, and after much study, I decided it was a lot easier to allow third-party users to process your emails. I would recommend PostmarkApp or even Amazon new A simple email service that has a free tier (2000 free emails per day) that can cover your entire application.
source share