Filter out subscriptions that haven't been backfilled yet

This prevents to get an account with AD credentials that isn't actually configured for it yet.