The ADSP specification explicitly discourages publishing a record different from "unknown" for domains who have independent users and a usage policy that does not explicitly restrict them to sending mail only from designated mail servers, since mail sent independently of the organization will not be signed [REF].
However explicitly that caveat is worded, it is not straightforward to understand the purpose and the limitations of ADSP.