Just a note to avoid pain: The DNS record must be preserved. Unlike other domain verifications. My handle later came out as "Invalid" because I had removed the entry.