How to grant permission directly to a user other than a role?
Use the user permissions module.  Contrary to your objections to using this module, it is not the grantee who needs the  "administer permissions", but the grantor