I ended up using a helper method that can also be used when checking the permissions for the destroy method in the subscriptions controller.  (This could possibly be called using gate syntax, but I wasn't sure, so what I have seems fine for now.)