ACL to approve pending registrations

Problem

I would like to delegate the ability to have a staff member to approve pending registrations without needing to allow someone to change instance configuration with instance:config:update acl

Proposal

An additional ACL under instance:config: to have a staff member approve pending registrations