Are all emails in the DB expected to have the verified field? What about emails we started with nearly 2 years ago? If not, would it be better to add an "unverified" flag for new entries so that old email entries are not affected?