Looking at the contents of those files, I think giving libvirt vms read access by default to all of them should be safe.
Looking at the contents of those files, I think giving libvirt vms read access by default to all of them should be safe.