Bastion: adding, removing, and auto-attach system subscriptions.