Does logrotate keep the permissions? If yes, that could work.