diff --git a/bind.spec b/bind.spec
index a0a2e6a..d3ef520 100644
--- a/bind.spec
+++ b/bind.spec
@@ -678,7 +678,6 @@ install -m 640 %{SOURCE26} ${RPM_BUILD_ROOT}/etc/named.conf
 touch ${RPM_BUILD_ROOT}/etc/rndc.key
 touch ${RPM_BUILD_ROOT}/etc/rndc.conf
 mkdir ${RPM_BUILD_ROOT}/etc/named
-install -m 644 bind.keys ${RPM_BUILD_ROOT}/etc/named.iscdlv.key
 install -m 644 %{SOURCE36} ${RPM_BUILD_ROOT}/etc/trusted-key.key
 
 # sample bind configuration files for %%doc:
@@ -861,7 +860,6 @@ rm -rf ${RPM_BUILD_ROOT}
 %defattr(-,root,root,-)
 %{_libdir}/bind
 %config(noreplace) %verify(not md5 size mtime) %{_sysconfdir}/sysconfig/named
-%config(noreplace) %attr(0644,root,named) %{_sysconfdir}/named.iscdlv.key
 %config(noreplace) %attr(0644,root,named) %{_sysconfdir}/named.root.key
 %{_tmpfilesdir}/named.conf
 %{_sysconfdir}/rwtab.d/named
@@ -1156,6 +1154,7 @@ rm -rf ${RPM_BUILD_ROOT}
 
 %changelog
 * Fri May 25 2018 Petr Menšík <pemensik@redhat.com> - 32:9.11.3-5
+- Remove named.iscdlv.key file (#1595782)
 - Make named home writeable (#1422680)
 - Change named shell to /bin/false
 
diff --git a/named.conf.sample b/named.conf.sample
index 9bf563f..f70725a 100644
--- a/named.conf.sample
+++ b/named.conf.sample
@@ -143,7 +143,7 @@ view "internal"
 	 * not leak to the other nameservers:
 	 */
 	include "/etc/named.rfc1912.zones";
- 
+
 	// These are your "authoritative" internal zones, and would probably
 	// also be included in the "localhost_resolver" view above :