After starting a rocket chat instance on herokuapp.com, to my dismay I discovered that anyone with the URL can just join the team.
How can I make it private, i.e. that only people with invites can join?
The option was buried in the “Accounts” settings, under “Registration”: “Manually Approve New Users”. It took me about 90 minutes to find this.