EventSub subscriptions are only created using an App Access Token
You just need to have created a user access token once you don’t even need to store it
EventSub checks if your clientID has had access to the resource you request. So you don’t need any user active access tokens on file (since a user token only lives for four hours anyway)