Under the admin portal usage_rules page there is a setting: "Developers can select a plan when creating a new application" that can be left unchecked even where there is no default plan.
We must make sure that the service has a default plan before this setting can be turned off.