Hi,
This is done in the code and I wouldn't recommend changing it manually either. You would also have to do it after each upgrade.
A far better way would be to add these users to the group. If they are in the group, since the group has read permissions, they will be able to read it.