Avoiding Pitfalls for Privacy Accounting of Subsampled Mechanisms under Composition