What exactly qualifies a subuser?