Private Matrix homeserver. Use an E2EE-capable Matrix client. Accounts are created by the administrator.