default to require invites for new providers

requires leap_cli 4173154a177b00c11a36b3168b1ce12af59f04af or later (>1.9.2). resolves #8474 (closed). create new invites with leap run invite