one last thought before we implement this.
I conclude that the FamilyPlan owner will be verified but the invitees to the plan will not. How could we implement the two aspect: verify identity of the owner only (to accommodate children and youth without identities), and verify identity of every user.
