Plan mode as the default

The Configuration lesson now recommends starting in plan mode with defensive bash permissions, so new students can learn safely.