Quite a few external or 3rd party packages would benefit from a
directory where one could drop in console.perms snippets relevant to
that application.

Suggesting addition of an "include" directive (with wildcarding) to
console.perms (and using that to implement the following), or simply
pulling in all /etc/security/console.perms.d/*.perms (filename
extension for whitelisting, in order to avoid pulling in backups and
such) before or after parsing the normal console.perms file.