turns out you have to leave the google-site-verification file in place forever :<