The ability to specify a default as mentioned in JPOSERVER-2764 would be a step forward, but presumably people would still be able to pick the non-default option and set plans to have 'No restrictions'.

In a more restrictive use case, we'd need to completely prevent the use of 'No restrictions' - either by disallowing completely or only allowing a trusted group (for example, Jira system admins) to set the 'No Restrictions' setting.