I’m going to put in some code to prevent bots from registering entirely - the same token-based system I use with the contact form.