The DNS records were added, and using the "Configure" dialog to test will say that the domain validates, but closing that dialog still marks the domain as "Authentication Incomplete".

What am I missing?