Permit with variable arguments

[eugenesvk]

I'd like to permit upgrade of installed packages without a password, e.g.,
permit nopass :staff cmd "port" args "upgrade" # MacPorts: upgrade ports
However, this fails with port upgrade pkg1 since the package name is considered a new args that has to be whitelisted
Would it be possible to add a new * argument to the args part that would match any number of the following arguments?