Does ConfirmAccount work with CentralAuth?
I assume you mean they get access to all wikis because it's a global login, just like any other use of CentralAuth? That shouldn't be a problem then.
Would it work to use CentralAuth if the databases don't have a suffix in their name? It mentions suffixes in the instructions, but we don't have them.