Hi Thomas,
Joe is correct - the fix version is listed as 3.4 (only), so the new functionality will only be available when 3.4 is released (scheduled for November 2017).
It seems that you can turn it on or off via a 'Require email verification' checkbox on the OAuth 2 services set-up page.