Apparently the moxygen code expects the Authorization SUBSCRIBE parameter, for SUBSCRIBE and SUBSCRIBE_DONE. The spec used to expect the username, in plaintext, in this parameter, but there's nothing about it anymore.