Kind of seems like a hack, but you can do:
class User < ActiveRecord::Base
default_scope { where("email_authenticated = ?", true) }
end
Documented here: http://apidock.com/rails/ActiveRecord/Base/default_scope/class. I just tested it and it works, without the side effect on create.