put zone files in /var/named/namedb. That way only /var/named/namedb must be owned by user named

src/etc/mtree/4.4BSD.dist

@@ -1,4 +1,4 @@
-#	$OpenBSD: 4.4BSD.dist,v 1.62 1998/10/30 18:38:06 millert Exp $
+#	$OpenBSD: 4.4BSD.dist,v 1.63 1998/12/19 05:27:38 millert Exp $
 
 /set type=dir uname=root gname=wheel mode=0755
 # .
@@ -1628,7 +1628,7 @@ msgs
 ..
 
 # ./var/named
-named		uname=named gname=bin mode=0755
+named
 
 # ./var/named/dev
 dev
@@ -1640,6 +1640,11 @@ etc
 # ./var/named/etc
 ..
 
+# ./var/named/namedb
+namedb		uname=named gname=bin mode=0755
+# ./var/named/namedb
+..
+
 # ./var/named
 ..
 

src/etc/namedb/named.boot

@@ -3,10 +3,10 @@
 ; boot file for secondary name server
 ; Note that there should be one primary entry for each SOA record.
 
-; NOTE: if you are not chroot'ing named, change directory to /var/named
+; NOTE: if you are not chroot'ing named, change directory to /var/named/namedb
 ;       OpenBSD chroot's named by default
-;directory	/var/named
-directory	/
+;directory	/var/named/namedb
+directory	/namedb
 
 ; type    domain		source host/file		backup file