add the ability to control who is able to subscribe
This seems tricky to enforce on a per-user basis since content federated to another instance for one user could easily be shared with another user on that instance without the original instance ever knowing about that.