I’ve modified ownership and permissions of BIND’s and DHCP’s config files to make my setup more secure. Thanks go to Peter Poeml for his comments.