http://pubsubhubbub.googlecode.com/svn/trunk/pubsubhubbub-core-0.3.html#rfc.section.6.2.1
"The subscriber MUST confirm that the hub.topic and hub.verify_token
correspond to a pending subscription or unsubscription that it wishes
to carry out. If so, the subscriber MUST respond with an HTTP success
(2xx) code with a response body equal to the hub.challenge parameter.
If the subscriber does not agree with the action, the subscriber MUST
respond with a 404 "Not Found" response."
So just wait around for auto-refreshing and return a 404 for
subscriptions you don't have and you're golden. Just be sure to return
200s for event deliveries on these same subscriptions. The 404 only
applies to subscription requests. If you reply with 404 to an event
delivery, the hub will just try again.
-Brett