You can manually change everything and it'll work for an account. It's the /scripts/fixfrontpageperm that I've never been able to fix to work with lsws.
cPanel's mod_auth_passthrough are supported in our 4.0.5 release, so FP will work properly out of box, no more fixing file/directory permission/ownership required.