A plugin that would allow a complex permission setting for categories would be useful in a lot of situations. That may be the best way to spend dev time for that problem ?
Maybe with a slug formula in a text setting :
e.g.: (#tos-acceptor or #direct-concern) and #premium-group