avoid deprecated `cli` option in guard-rspec
stricter attribute permissions on attendee records
extracts service `FindsChangesToDisabledPlans`
extracts private methods