* Propagate verification errors Without this, it is possible (though unlikely) for a finding to incorrectly be classified as `unverified` when it is in fact `unknown`. * Fix logic error in Box OAuth verification * Expand comment for Box OAuth verification; fix its logic