icinga: Move permission fixing HACKs into module

These should DIE DIE DIE IN A BIG FIRE at some point, though.

Change-Id: Ieada8a67f18fa161bb4272eb1c6d348ebaf951a0