Shooting in the dark here, but would it work to simply delete the reports in question from the deployed location, set the security you want for the parent folder, and then redeploy the reports. At that point they should automatically pick up the correct security settings.