Whitelisted usernames only.

Accounts are self-service once an admin pre-approves the username. Passwords are hashed and never stored in plaintext.