IDEX-732: fix NPE when unknown service id is used
IDEX-732: deny account owner add, remove subscriptions; add test; cleanup