I'm sure this been recommend but I think there should a commandline permission system
example
Commandline Group ID 1
-examplecommandline 1 -banana 1000
Commandline Group ID 2
-examplecommandline 1 -banana 1000
-examplecommandline 1 -banana 3000
-examplecommandline 1 -banana 5000
-examplecommandline 1 -banana 100
-examplecommandline 1 -banana 2000
Commandline Group ID 3
Commandline Group ID 4
-examplecommandline 1 -banana 23
Then within the default_values.php for the billing panel you could set commandline permissions from a configurable option.
So like this
1|Banana1000, 2|Banana Alot, 3|Banana None, 4|Banana23
Then back inside the TCAdmin panel have an option at the bottom of each commandline group where you add other groups ids when you assign a commandline permission they have access to the commandline group you assigned them.
I think this would work