You can clone with
No one assigned
When a user is created, automatically send a password reset email.
On new email address, send a verification to the member's email.
Add a report for unverified emails.
Password reset should verify the email.
3cce096 Takes care of automatically sending a password reset email link.
So now all we need is an email verification system, similar to password reset.