If anyone is curious, it looks like the place where this is happening is dcop/dcopserver_shutdown.c:cleanupDCOPsocket(). It shells out to "iceauth remove" which writes a new .ICEauthority and then renames it in place of the old one.
I suppose another fix would be for iceauth to preserve ownership and permissions when it does this, which seems somewhat less intrusive.
If anyone is curious, it looks like the place where this is happening is dcop/dcopserver _shutdown. c:cleanupDCOPso cket(). It shells out to "iceauth remove" which writes a new .ICEauthority and then renames it in place of the old one.
I suppose another fix would be for iceauth to preserve ownership and permissions when it does this, which seems somewhat less intrusive.