SPF "too many DNS lookups" (permerror): why it happens and how to fix it

If a DMARC report or a checker says spf=permerror or "SPF exceeded 10 DNS lookups", your SPF record...