It would be cool if you could do something like

multiverse.signportal.WORLD.validate
multiverse.signportal.WORLD.create

where WORLD is the third line on the sign. That way you can allow ppl to create portal to certain worlds, but not for others.

Your permissions plugin should handle this, unless I'm grossly misunderstanding the request. If that's the case, please reopen.