You can get a list of all the KOs you care about like this:
|rest/services/configs/conf-macros | eval config="macros" | append [|rest/services/configs/conf-lookups | eval config="lookups"] | append ...
Then you can examine the permission fields you care about and export them to a file with outputlookup. Run this search every day and schedule another search to run just before you overwrite it, that checks the values now and look for differences.
