A correction on the above "I just tried with qemu.conf setting user/group to root -- the ISO gets chown-ed to root:root, 0600.": Actually, the permissions are kept as they were.
A correction on the above "I just tried with qemu.conf setting user/group to root -- the ISO gets chown-ed to root:root, 0600.": Actually, the permissions are kept as they were.