I don't ever use authentication with relay.plus.net.
I suspect that will give rise to ambiguity over which servers are used. I await an answer on clarification.
Regardless, that SPF configuration should do what you need.
Superusers are not staff, but they do have a direct line of communication into the business in order to raise issues, concerns and feedback from the community.
