Restore alias :create / :index to legacy routes
Protect plan changes with a permission