We have had a couple incidents where on a fresh installation we allow new user registrations from the public, this proposes that we make this the default for new installations: