I haven't read ahead yet, but when would the system be nil?  From initial glance, seems like use could invoke api an invalid system and be able to create/destroy/destroy_all subscriptions.