I wonder if that works

diff --git a/modules/unbound/manifests/init.pp b/modules/unbound/manifests/init.pp
index d412490..10bb5ff 100644 (file)
--- a/modules/unbound/manifests/init.pp
+++ b/modules/unbound/manifests/init.pp
@@ -38,6 +38,7 @@ class unbound {
             notify  => Exec["unbound restart"],
             owner   => root,
             group   => root,
+            require => [ File[/var/lib/unbound/root.key],  File[/var/lib/unbound/debian.org.key] ],
             ;
     }