Proper way to run bind9

Just wondering what the correct rc.conf options should be used for the
new bind9. I have it working but using the default
named_pidfile="/var/run/named/pid" I get to many levels of symlinks
error, so I just made it /var/run/named and it works.

What I have right now is

named_enable="YES"
named_flags="-c /etc/namedb/named.conf"

I mean I have it running no problem. I just want to have it running
securly the correct way, and since its new there really are no guides.



---
named_enable="NO"               # Run named, the DNS server (or NO).
named_program="/usr/sbin/named" # path to named, if you want a different
one.
named_flags="-u bind"           # Flags for named
named_pidfile="/var/run/named/pid" # Must set this in named.conf as well
named_chrootdir=""              # Chroot directory (or "" not to auto-
chroot it)
named_chroot_autoupdate="YES"   # Automatically install/update chrooted
                                # components of named.
See /etc/rc.d/named.
named_symlink_enable="YES"      # Symlink the chrooted pid file

--

Grover Lines