Background
On many applications, it is possible to limit the ability to create objects from that application. These include Diffusion, Badges, Countdown, Projects, Legalpad, Phurl, etc. Other applications such as Maniphest and Paste use customizable forms via EditEngine allowing for the absence of a "Can Create" policy (you have to restrict the forms' view policies).
The Problem
Conpherence has no "Can Create Rooms" policy, opening the door for spammers to create spam-only rooms.
Proposed Approach
An approach similar to countdown.cancreate and diffusion.cancreate can be used.