Is there a way to use multiple ASM profiles on one Virtual Server?

You can have multiple policies assigned via LTM rule, but request by request, it's always either/or and never both.

There's no way I know of, to have one request pass through multiple ASM instances. (except actually routing the traffic through multiple vservers)

For what it's worth, I have also been dreaming about this feature, for the same reason you mentioned.

Maybe it's possible for you to define a couple test users or corporate network IPs that you consider trusted and assign the new policy to them based on source IP?