Creating more symlinks won’t work as the permissions of the target file are the only ones that matter. Putting the ircd user in the root group won’t work ether due to the permissions of the archive and live directories being 700.
On my server I have my renewal script copy the cert to the ircd directory and set ownership to the ircd user.