Some of the bioauth parameters should be configurable at the chain spec level, more specifically as the client config extension (i.e. not in genesis).
One of such parameters for sure is the robonode URL. The web app URL may also be put there.
Keep in mind that regardless of these changes, the CLI argument must remain, and must take priority over the chainspec if specified. The effect from the chainspec should, therefore, be sort of like setting a custom default for the CLI flags.