Or, if you
don't mind
sacrificing a bit of accessibility, you can just set the CAPTCHA to trigger
on unregistered users' edits and registration attempts.
I've had good luck doing this with reCaptcha. It eliminated (so far)
all user-creation bots and valdalbots.