Override the UserOpenID save method and deal with the account_verified permission there, so it can be re-used by user and admin code.  Only update the UserOpenID if the value of account_verified has actually changed.