dkimproxy.out using for DKIM sign header with private key. From /etc/dkimproxy_out.conf: # specify location of the private key keyfile /etc/ssl/dkimproxy/private.key From init.d/dkimproxy.out: start-stop-daemon --start --exec /usr/bin/dkimproxy.out --pidfile /var/run/dkimproxy.out.pid -- --conf_file /etc/dkimproxy_out.conf --daemonize --group=nobody --user=nobody With this command dkimproxy.out will run as nobody:nobody and I should expose private key for this user. Is it right? In ebuild pre 1.4 user was dkfilter, with 1.4 it changed to nobody. Reproducible: Always