Role of Account Keys and Web Private Keys for Working With Sub Domains

Each hostname is validated separately. So that's not really a consideration. (Assuming validation is fully automated, it isn't any less convenient.)