It get set in cmdlineopts.clp, and get passed all the way to $DEBOOTSTRAP. Any questions?
ps,
I still think --packages or --debconf without the optional parameters is useful. It normally takes me more than 3 iterations to use grml-debootstrap, not every time I need to install extra packages and pre-seed packages. I believe such request is not uncommon.