I was looking before implementing DKIM how to solve this on DNS side and I have done this:
We do not directly set a DKIM on domains we use CNAME that points to our DKIM record on our domain.
Example dns records on our company root domain:
_dkim1.example.com. IN TXT "v=DKIM1; h=sha256...