I am told that we are "running into 2 feature requests for the new User Management functionality". Of course they then linked me to inaccessible issues I asked him to clarify exactly what features are being added. My assumption is he meant either:
1) Captcha support for self-signup
2) Email verification for self-signup

or

1) Verification (of some/any sort) on self-signup
2) Better "contact administrators" support.

I've asked him to clarify what he meant (since I cannot see the issues he referenced).

In the mean time, our only option is to either enable open-ended (no protections whatsoever) account creation or to limit account creation to just admins. I vote we just limit it to admins for now. Yes it sucks for us, but i think it sucks less than having to go back and weed out bogusly created accounts.