add ClientConnectPolicy config option
There should be a config option called ClientExitPolicy which specifies which destinations clients are allowed to build circuits to. The default value should be "accept :".
This will deprecate the RejectPlaintextPorts option as it will be able to provide the same functionality.
I am beginning to work on a patch for this.
To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information