A private plan host. Plans are reachable only via their unguessable link.
Upload with POST /api/plans and a bearer token.
POST /api/plans