This bug can be fixed by: 1) Adding a line that says include "/etc/bind/rndc.key"; to /etc/bind/named.conf and then 2) Making /etc/bind/rndc.key be owner root:bind mode 640
Given the number of years this bug has been outstanding, it would be really nice if someone would fix it.