bastodon/app/policies/subscription_policy.rb