Bastion: adding, removing, and auto-attach system subscriptions.

- [x] auto-attach
- [x] make it perty
- [x] additional tests
- [x] fix PR comments