I would definitely say it's your Bulletproof Security settings. This is also applicable to WP Better Security.
There is a setting/tweak related to removing write permissions from .htaccess and wp-config.php, turn that off and you should be good to go.