[support] How to safeguard sites from unwanted users