Subscribers now authenticate using Ed25519 keypairs instead of a shared SUBSCRIBE_SECRET. Each connection request requires the public key, a timestamp, and a cryptographic signature to verify the client's identity and prevent replay attacks. This effectively treats the public key as the unique device token, simplifying client management while significantly improving security.