As far as I can tell, the Firewall module lets you restrict server access by IP address. It would be useful to be able to restrict each Subscription by IP address.