Could the list of users be added in the Helix Server database, for server-based administration?
I see that the list of users is defined in the .yaml file in this change (which is, of course, perfectly acceptable!!). As the trigger environment variables includes one that lists the group membership for a given user, it's a decision between using a group inside the Helix Server to determine those users who can bypass the trigger, or retaining them in your current file.
Depends how you want the separation, I suppose - the file(s) can be checked in and controlled, where you'd need a spec depot to manage the user group.