Additional capability checks are now in place to stop unauthorised users from accessing the event monitor subscription page. Thanks to Eloy Lafuente for creating a gist with ideas of tackling No site level capability to the rule subscription.