I recently went through this, and the generated file looks a bit different than was previously documented. I opted to be explicit about `k=rsa` (even though [the default is "rsa"](https://datatracker.ietf.org/doc/html/rfc6376#section-3.6.1)). I also opted to be explicit about `s=email` ([the default is "*"](https://datatracker.ietf.org/doc/html/rfc6376#section-3.6.1)). Honestly not sure what the consequences of this are, I don't know if DKIM is used for anything besides email.