Seriously Google, unless the domain == example.com , don't show it by default.
Y/N
And even so I supposed after the verification step the code is active so anyone could use it. Does GA code ever expire?
Sounds like an expiration date would be a reasonable solution plus a way for the account holder to deactivate the code from admin panel.