This is what I do, for both Fastmail and replicated for my own email domain.