Can I change a subscriber's auth key?

Yes, you can use the auth method to change the auth-key on the client side. Just be sure that the appropriate permissions are set for the new auth-key before the client uses it.