I just looked back through my test logs again, and I see when I ran the same command again today that it did indeed send me the same DNS TXT entry to use for verification. And it completed successfully that time.
When I saw this line, it made me think the DNS TXT entry I was initially given had expired, but maybe that’s not the case:
2018/10/31 10:30:50 Domain verification results for 'test.madbray.com': error. J
WS has invalid anti-replay nonce POVfkWIRpRIJDBUsy0SOILcWrUSIz6CYGNxXokGHbEU
I guess my question is: Is this feasible (to wait days for the customer to setup the DNS), then go back & run the same command again and let it verify?