We've just shipped an enhancement to service tokens. You can now grant access to all databases instead of needing to set permissions one by one.
When granting access to all databases, the permissions will apply to both current and future databases. Additionally, they cannot be removed individually from any database.
This is now available to organization administrators on the service token permissions page.