I'm leaning toward `allow_sign_up` as well