I'd copy the verification block first, especially the clone of another private repo that has to come back 403 or 404. One of our mailbox checks is the mirror image: the result we want there is an empty search, so it only counts as clean if a broader search of the same inbox finds at least one message.