The short answer is to have them owned by the correct person in the debian/tmp (or, which newer debhelper versions, debian/<package>) directory.
For situations where you need a file in debian/tmp to be owned by
somebody other than root, don't use fakeroot to build the package,
because it forces everything to look like it's owned by root. Use
sudo.
--
thanks,
Will
