One solution could be to add a new switch to /write that would change it from wrapping things up by deleting the original and renaming the updated copy as the original - to instead write the contents from the updated copy on top of the original, then delete the copy.
This way the original never gets deleted and loses its permissions. With the optional switch, only those needing the permissions preserved would be subjected to the extra burden of copying from the update-copy instead of renaming it.
