Hi Kevin, > can we not make unbound not try to write to it at all
it seems that you are using auto-trust-anchor-file, but what you search for is trust-anchor-file. > and have a cronjob that runs to update it every so often to make sure it is > the correct key? Then you can use unbound-anchor to update it.
