The registration/login pages were not honoring the EmailForgottenPasswordP parameter. This enforces that parameter, allowing admins to disable emailing out passwords.
Made the default to allow self_registration as this was the previous behaviour. It is always a bad idea to change the behaviour for existing sites. Still wondering why the parameter does not show up on my installation though ...