Makes sense.  I would love for these to be under /var somewhere.  The same with /etc/openshift/system-config-firewall-compat.  It's not really a config file that we except people to edit.