I suspect the right way to do this is to create a 'ceph' group on package install, and chgrp these directories accordingly?  I would look at what other packages do here.  This will technically work because the other ceph daemons still run as root, but will break once they don't; I'd rather jump straight to a clean approach here.