Right now, there's two cases where an attempt to subscribe to a collection can fail. Either an invalid collection ID is passed, or the user doesn't have permission to see the collection (or is a collaborator to a private collection, see MBS-10327). 

Both of these situations return 404, but that seems just wrong - the former should be a bad request, the latter a forbidden one.