Description of problem:
On a 4.0.3 host if /var/run/sanlock/sanlock.pid's permissions are sanlock:sanlock it will get permission denied when trying to take over as SPM either forced or not.  If I run vdsm-tool configure --force it doesn't check or fix permissions.  

If I chgrp to qemu it works fine.  
If I add vdsm to the sanlock group it doesn't.

/etc/group:
qemu:*:107:noentrylisted,vdsm
sanlock:*:179:vdsm

Version-Release number of selected component (if applicable):


How reproducible:
100%

Steps to Reproduce:
1. Install new host via web gui
2. SPM will remain normal and the engine log will try endlessly to make it SPM

Actual results:
Host cannot be SPM

Expected results:
Host becomes SPM

Additional info:
2016-09-20 12:07:46,420 INFO  [org.ovirt.engine.core.vdsbroker.vdsbroker.ConnectStoragePoolVDSCommand] (DefaultQuartzScheduler1) [4c6f90de] START, ConnectStoragePoolVDSCommand(HostName = ovirt-reqa1, ConnectStoragePoolVDSCommandParameters:{runAsync='true', hostId='5d9188df-aafd-45c9-bc4b-03357ed790b2', vdsId='5d9188df-aafd-45c9-bc4b-03357ed790b2', storagePoolId='00000001-0001-0001-0001-0000000000d8', masterVersion='1'}), log id: 35331970
2016-09-20 12:07:47,624 INFO  [org.ovirt.engine.core.vdsbroker.vdsbroker.ConnectStoragePoolVDSCommand] (DefaultQuartzScheduler1) [4c6f90de] FINISH, ConnectStoragePoolVDSCommand, log id: 35331970
2016-09-20 12:07:47,763 ERROR [org.ovirt.engine.core.vdsbroker.vdsbroker.SpmStatusVDSCommand] (DefaultQuartzScheduler1) [4c6f90de] Failed in 'SpmStatusVDS' method
2016-09-20 12:07:47,767 ERROR [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (DefaultQuartzScheduler1) [4c6f90de] Correlation ID: null, Call Stack: null, Custom Event ID: -1, Message: VDSM ovirt-reqa1 command failed: (13, 'Sanlock resource read failure', 'Permission denied')
2016-09-20 12:07:47,767 ERROR [org.ovirt.engine.core.vdsbroker.vdsbroker.SpmStatusVDSCommand] (DefaultQuartzScheduler1) [4c6f90de] Command 'SpmStatusVDSCommand(HostName = ovirt-reqa1, SpmStatusVDSCommandParameters:{runAsync='true', hostId='5d9188df-aafd-45c9-bc4b-03357ed790b2', storagePoolId='00000001-0001-0001-0001-0000000000d8'})' execution failed: VDSGenericException: VDSErrorException: Failed to SpmStatusVDS, error = (13, 'Sanlock resource read failure', 'Permission denied'), code = 100
2016-09-20 12:07:47,767 INFO  [org.ovirt.engine.core.vdsbroker.irsbroker.I