Self-service: simple teacher registration

Can we limit this somehow? E.g.
* Only accept emails where the domain exists on our allow-list
  * Application form where teacher/school admin can enter school domain/URL and we'll manually/automatically review to verify it belongs to a school
* Use some national school authentication system
* Manually review / approve requests a few times a week