What about a post-backup script with chmod -R 640 /mnt/backup, just an idea…not tested.
chmod -R 640 /mnt/backup