Have the thing that creates a server when a group is created also grab the most recent subscription ID and stick it into the server record when the server gets created.
Then do something
to, say, not allow upgrades if the subscription is expired.
For one-time installs, maybe just give them 6 months?