Http.sys creates these folders automatically if they do not exist. If you override the permissions with something else, it should preserve the new permissions.