(..)
It's a series RC network from CATHODE to REF and in the event of any trouble I would experiment with increasing C or decreasing R because I have no clue how to do it any smarter 
(..)
no just a zener will not regulate your load in full range...
To play with that without burning a lot of switching drivers.. (BJT or MOSFETS)
you need SPICE... you need to run several simuls with load and type variations..
SPICE is handy cause you can
program the whole thing in spice decks..
once you got it it may be reused.
Required models:
.subckt 4N25 1 2 3 4 5
R1 N003 2 2
D1 1 N003 LD
G1 3 5 N003 2 .876m
C1 1 2 18p
Q1 3 5 4 [4] NP
.model LD D(Is=1e-20 Cjo=18p)
.model NP NPN(Bf=610 Vaf=140 Ikf=15m Rc=1 Cjc=19p Cje=7p Cjs=7p C2=1e-15)
.ends 4N25
.SUBCKT TL431 7 6 11
.MODEL DCLAMP D (IS=13.5N RS=25M N=1.59 CJO=45P VJ=.75 M=.302 TT=50.4N BV=34V IBV=1MA)
*V1 1 6 2.495 ; used for fixed reference, replaced with B1 Limiter
B1 1 6 V=V(7,6) > 2.495 ? 2.495 : V(7,6)
R1 6 2 15.6
C1 2 6 .5U
R2 2 3 100
C2 3 4 .08U
R3 4 6 10
G2 6 8 3 6 1.73
D1 5 8 DCLAMP
D2 7 8 DCLAMP
V4 5 6 2
G1 6 2 1 11 0.11
.ENDS
Done that couple times lately but many times over in academia...

Paul