Make use of ACL to allow/deny users from using the bot

Hello

Basically I would like to restrict email usage only to admins/mods, so that no one can create any email address on my domain without consent. Some bots already provide ACL to allow/disallow MXID, so I guess it should be doable.

I don't want to go into particulars on how this should be handled.. I think you're the best person to decide that.

Thanks