Parse and validate any SPF record. Counts the 10 DNS-lookup limit imposed by RFC 7208, flags dangerous qualifiers (+all, ?all), missing all mechanism and redirect chains.