* A client must not be able to create an ICS subscription with a protected tag. * A client must not be able to modify an ICS subscription to include a protected tag. The implementation can be adapted from the implementation for events, in #218.
