[add] pub/sub restrictions