Perhaps the best way to deal with this situation is to grandfather in all existing users by whitelisting everyone, and then only applying the newbie rule to new accounts.