Edit - post removed!
This post was originally written based on the Exchange 2010 beta bits before the Technet documentation was updated to reflect the actual required permissions for a DAG's FSW. Consequently, it had a major error. You'll want to visit Devin's page for a full explanation and the correct way to set up the DAG. Always helps when you can read the documentation, right? :)