If you see my response above, the method I use removes that annoying caveat. Outbound emails are signed and validated using the custom domain through AWS SES and you don’t get “behalf of” label.