diff --git a/encrypted-dns.sh b/encrypted-dns.sh
index bb51607..9712207 100755
--- a/encrypted-dns.sh
+++ b/encrypted-dns.sh
@@ -8,4 +8,7 @@ if [ ! -f "$KEYS_DIR/provider_name" ]; then
     exit 1
 fi
 
+chown -R _encrypted-dns:_encrypted-dns /opt/dnscrypt-wrapper/etc/keys 2>/dev/null || :
+chown -R _encrypted-dns:_encrypted-dns /opt/encrypted-dns/etc/keys 2>/dev/null || :
+
 exec /opt/encrypted-dns/sbin/encrypted-dns --config "$CONFIG_FILE"