When Bind has been started with e.g. '-u bind -g bind', and if you do 'ndc restart', bind will be restarted as root, not as bind:bind. This seems to be the problem on other Unix variants too, so this is probably a bug in ndc.
This is an ndc bug, and it will be fixed in bind-8.2.2_P5-10, in Raw Hide (ftp://ftp.redhat.com/pub/rawhide/). I've sent a patch to ISC, so that they can incorporate our fix if they don't have a better solution.
Thanks a lot! Could you also re-consider bug #8062? The glibc21 patch breaks non-glibc21 builds. Fixing this wouldn't be that difficult, even some attempt of mine to fix the patch is included there :)