Should this required the source to be email (which would allow bypass of this feature via api). As is, enabling this option would forbid staff members to create tickets on behalf of users without registered accounts via the staff interface.