Don't expose ZSUBAUTH

Authentication details shouldn't be in the public API.
Expose Z_Subscriptions as ZSubscriptions

With a custom send_routine that mirrors ZSrvSendList. This allows for an
asynchronous version that replaces send_routine with non-blocking versions (and
waits for ACKs out-of-band).