diff -up opencryptoki-3.24.0/misc/pkcsslotd.service.in.me opencryptoki-3.24.0/misc/pkcsslotd.service.in
--- opencryptoki-3.24.0/misc/pkcsslotd.service.in.me	2025-02-02 16:38:29.381579155 +0100
+++ opencryptoki-3.24.0/misc/pkcsslotd.service.in	2025-02-02 17:06:30.048042047 +0100
@@ -9,6 +9,7 @@ Type=forking
 PIDFile=/run/opencryptoki/pkcsslotd.pid
 ExecStart=@sbindir@/pkcsslotd
 
+ExecStartPre=+-/bin/sh -c "/bin/chown -f -h root:pkcs11 /etc/opencryptoki/{strength.conf,p11sak_defined_attrs.conf}"
 # Uncomment the following line to allow pkcsslotd to increase the receive buffer
 # size of the UDEV monitor's netlink socket via udev_monitor_set_receive_buffer_size():
 # AmbientCapabilities=CAP_NET_ADMIN