user self-registration still enabled when set to Deny

I am running workspaces 1.2M1 as a virtual xwiki under xem 1.3. I have set the virtual xwiki to be private in the xem configuration page. I have set local registration to Deny in the global administration page on the workspaces site.

The self-registration form is still present and functional on the login page.