Remove the capability to add new users from anyone except the Site Admin and then just trust them not to add more than 10+2
Or, once the 12 users are set up, remove the capability from everyone - but bear in mind a site admin can always give it back to themselves.