This will help to ensure we encapsulate verification state in the model
(or later, in the registry, when we implement verification on
secondaries).

The verification_started_at field will make it much easier to properly
manage concurrent verification jobs.