This sounds like a good idea. I’m guessing that there would be a log of who “/approved” a new user and that the person doing the approval could be held responsible for any potential harm done by the new person.