It would be nice if the protocol allowed extension points in the SUBSCRIBE action. Right now it's not possible to use dynamic authorization delegation using signatures.
This is a feature of a lot of open source MQTT brokers (Mosca, Mosquitto). We used Mosquitto for our app (http://www.clementine.io), and added dynamic auth for SUBSCRIBE and PUBLISH.