Your need to give the user a usergroup using your plan. CBSubs will then remove it when they expire. This should give you the behavior you're wanting. Alternative is you could try using CB Auto Actions to remove the usergroup (there's a few usage examples of this on the forums).