@paul @trwnh Yeah those are to prevent bot accounts, but are disabled by default so it's really up to the admin to decide what works best for them.
The boolean state of enabled or disabled didn't seem to cut it, I figure admins will want these additional configuration options.
@dansup @paul fundamentally what we are trying to encode is trust to use media resources, but imo this is not much different than federating 1000 posts to your server from a remote server