Use an IP risk signal in signup without calling it identity verification

A signup handler receives an IP risk result and someone proposes rejecting anything above a...