This will remove the need for the cronjob, but not totally, best still to run the cronjob to catch situations where the permission changes can be missed.