Entitlements from derived product pool not able to get upstream

The subscritption id is not on the stacked pools that are created for derived products.
The entitlements for those pools do not allow Thumbslug use as the upstream
cert comes from the subscription.
Nothing should ever have a sourceSubscription AND sourceStack.  I'm not sure how much more work the db has to do for this join, it shouldn't cause problems.