We should have a reasonably convenient way to pass command-line options to passt via libvirt, mostly for debugging purposes. This is already supported for QEMU (per-domain) and dnsmasq (per-network).

Whenever I need to debug something I'm using a shell wrapper in /usr/local/bin, but it's not so convenient for users (or for anybody, really).