The session can become verified when the user enters their recovery key, and in this case the callback `didFinish` is not invoked.
The session can become verified when the user enters their recovery key, and in this case the callback `didFinish` is not invoked.