Description of problem:
When attempting to start a VM with RHEVM via CLI, API, or Web console hypervisor reports permission denied error related to disk:

Version-Release number of selected component (if applicable):
[root@cannery ~]# rpm -qa libvirt kernel vdsm
libvirt-0.10.2-18.el6_4.9.x86_64
vdsm-4.10.2-23.0.el6ev.x86_64
kernel-2.6.32-358.14.1.el6.x86_64


How reproducible:
100%

Steps to Reproduce:
1. Attempt to start VM
2. ...
3. Faceplant

Actual results:

2013-08-21 00:34:06.838+0000: starting up
LC_ALL=C PATH=/usr/local/sbin:/usr/local/bin:/usr/bin:/usr/sbin:/sbin:/bin QEMU_AUDIO_DRV=spice /usr/libexec/qemu-kvm -name oseprd-sn01-las-example-com -S -M rhel6.3.0 -cpu Westmere -enable-kvm -m 16384 -smp 8,sockets=1,cores=8,threads=1 -uuid d00e51d7-3b12-462d-b49f-d237abcf415a -smbios type=1,manufacturer=Red Hat,product=RHEV Hypervisor,version=6Server-6.4.0.4.el6,serial=37333036-3831-5355-4530-343934504E4D,uuid=d00e51d7-3b12-462d-b49f-d237abcf415a -nodefconfig -nodefaults -chardev socket,id=charmonitor,path=/var/lib/libvirt/qemu/oseprd-sn01-las-example-com.monitor,server,nowait -mon chardev=charmonitor,id=monitor,mode=control -rtc base=2013-08-21T00:34:06,driftfix=slew -no-shutdown -device piix3-usb-uhci,id=usb,bus=pci.0,addr=0x1.0x2 -device virtio-serial-pci,id=virtio-serial0,bus=pci.0,addr=0x4 -drive if=none,media=cdrom,id=drive-ide0-1-0,readonly=on,format=raw,serial= -device ide-drive,bus=ide.1,unit=0,drive=drive-ide0-1-0,id=ide0-1-0 -drive file=/rhev/data-center/be52daae-74a3-11e2-b9ed-68b599b8bbb8/0c58ed0d-d891-4fad-a453-8d2ee64f797b/images/322848ca-7fae-4897-94e3-9b6ff138da79/275b804c-33d6-4a3f-8873-8ad7f967e63c,if=none,id=drive-virtio-disk0,format=qcow2,serial=322848ca-7fae-4897-94e3-9b6ff138da79,cache=none,werror=stop,rerror=stop,aio=threads -device virtio-blk-pci,scsi=off,bus=pci.0,addr=0x5,drive=drive-virtio-disk0,id=virtio-disk0 -netdev tap,fd=29,id=hostnet0,vhost=on,vhostfd=30 -device virtio-net-pci,netdev=hostnet0,id=net0,mac=00:1a:4a:01:c5:43,bus=pci.0,addr=0x3,bootindex=1 -chardev socket,id=charchannel0,path=/var/lib/libvirt/qemu/channels/oseprd-sn01-las-example-com.com.redhat.rhevm.vdsm,server,nowait -device virtserialport,bus=virtio-serial0.0,nr=1,chardev=charchannel0,id=channel0,name=com.redhat.rhevm.vdsm -chardev socket,id=charchannel1,path=/var/lib/libvirt/qemu/channels/oseprd-sn01-las-example-com.org.qemu.guest_agent.0,server,nowait -device virtserialport,bus=virtio-serial0.0,nr=2,chardev=charchannel1,id=channel1,name=org.qemu.guest_agent.0 -chardev spicevmc,id=charchannel2,name=vdagent -device virtserialport,bus=virtio-serial0.0,nr=3,chardev=charchannel2,id=channel2,name=com.redhat.spice.0 -spice port=5900,tls-port=5901,addr=10.205.48.128,x509-dir=/etc/pki/vdsm/libvirt-spice,tls-channel=main,tls-channel=display,tls-channel=inputs,tls-channel=cursor,tls-channel=playback,tls-channel=record,tls-channel=smartcard,tls-channel=usbredir,seamless-migration=on -k en-us -vga qxl -global qxl-vga.ram_size=67108864 -global qxl-vga.vram_size=67108864 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x6
qemu-kvm: -drive file=/rhev/data-center/be52daae-74a3-11e2-b9ed-68b599b8bbb8/0c58ed0d-d891-4fad-a453-8d2ee64f797b/images/322848ca-7fae-4897-94e3-9b6ff138da79/275b804c-33d6-4a3f-8873-8ad7f967e63c,if=none,id=drive-virtio-disk0,format=qcow2,serial=322848ca-7fae-4897-94e3-9b6ff138da79,cache=none,werror=stop,rerror=stop,aio=threads: could not open disk image /rhev/data-center/be52daae-74a3-11e2-b9ed-68b599b8bbb8/0c58ed0d-d891-4fad-a453-8d2ee64f797b/images/322848ca-7fae-4897-94e3-9b6ff138da79/275b804c-33d6-4a3f-8873-8ad7f967e63c: Permission denied
2013-08-21 00:34:07.123+0000: shutting down

Expected results:
A running VM

Additional info:

Looks suspiciously like BZ 997350 but completely different package versions and we're not chaining CAs (though it would certainly be nice to be able to).