> If this is the stock BIND that ships with OpenBSD, shouldn't it just work > without any permissions/ownership changes?
OpenBSD does not ship with a stock BIND. It has privilege seperation added, which has already saved us from problems a few times. Yes, that means there might be some new small problems with some tweaky options they wrote wrong, which noone uses...
