When someone *enters* the verified flow (whether or not they actually finish), we create an enrollment if the user doesn't already have one—at that point, we could add something like "if enrollment didn't already exist, then this is an upgrade"—but that would still require either an extra field or a cookie, to carry that information through to the end of the verified flow.  So yeah, I'll add cookies to this real quick