the subject relation is optional (since you may not need one), but the subject type is required on the request