I guess the main problem is that the "Create" permission for a user is 
used for "Add User" and "Register". So maybe the solution should be to 
separate these permissions and create a new "Register" permission.