We're having plently of requests to have this grant enabled on local wikis with the configuration mentioned in the task title. In fact most of the local rules in InitialiseSettings.php are configured as such.
I think we should just allow bureaucrats at WMF wikis to handle this as we recently did with 'confirmed' (T101983) and 'translationadmin' (T178793).
Bureaucrats only exist on large wikis so we can trust there'll be community supervision on the granting and removing of this grant. In case there's no local bureaucrat, stewards can be called to fullfil that role and assign/remove said permission with equal guarantees of supervision.
Local customizations will be possible as in the previous two cases in the event a wiki decides that administrators (for example) be allowed to add/remove this.
I don't think this is a controversial change but I'm announcing this notwithstanding on the Wikimedia Forum.