I thought about this, actually, and no. The only way that we'd get successful authentication is if RDFE knows that the account is associated with a subscription, so there has to always be at least one subscription returned.