Allow admins to create subscriptions on behalf of users even if they don't have "create" permission

With the new ACL, there's now a specific permission to "create subscriptions of X type".

However, even if a user doesn't have permissions to manually create a subscription for himself, administrators should be able to do it on their behalf.