adding exceptions to the Firewall

So, I figured out how to make a pkg that included firewall exceptions (Java for SAV and CIFSD for AdmitMac), but going on in the future, as the end user comes back to me with needed exceptions for their apps - is there a script I can do to append the exception to the list or do I need to create another pkg that includes all the previous exceptions + the new ones?