Remote subscriptions (and subscriptions to sandboxed users too, I think) show up on public timeline