diff --git a/unbound.spec b/unbound.spec
index 8f6a837..7d37c44 100644
--- a/unbound.spec
+++ b/unbound.spec
@@ -432,6 +432,11 @@ fi
 %postun anchor
 %systemd_postun_with_restart unbound-anchor.service unbound-anchor.timer
 
+%triggerun -- unbound < 1.20.0-14
+if [ "$(stat -c '%%a %%G' %{_sysconfdir}/%{name}/unbound_control.key 2>/dev/null)" = '600 unbound' ]; then
+   %{_bindir}/chmod g+r "%{_sysconfdir}/%{name}/unbound_control.key" || :
+fi
+
 %check
 pushd %{dir_primary}
 #pushd pythonmod