Right now I run that automatically after I did run the updater:
#!/bin/bash
# set correct group
chown -R root:games *
# Set correct permissions for files and folders
find . -type f -exec chmod 644 {} +
find . -type d -exec chmod 755 {} +
# Set correct permissions for executables
chmod 754 {psclient,pssetup,psupdater}.bin ps{client,setup,updater} $0
# Set correct permissions for configs
# might not be needed anymore
chmod 664 {psclient,pssetup,vfs}.cfg
It is part of my Arch Linux PKGBUILD and not a general solution since you have to adapt the permissions for your installation manually.
If somebody is interested in the new PKGBUILD, just tell me. For now I will wait until some things are fixed by update before I send my build to the current maintainer (who can send a message to me if he actually is also working on this already)
PS:
It might also be an option to make everything writeable for the group games, so the updater can be run not beeing root, too.