What does "Always Allow..." actually do?
If you can't work out what "Always Allow" does, I would suggest running something like fseventer to see what OS X changes. If it hits a plist file then you'll be able to run defaults on it. 

I'm assuming its probably in the com.apple.applicationaccess.plsit. (But not tested)