On the Permanence of Backdoors in Evolving Models