How would you run named inside a chroot jail as user nobody and group nogroup?

A.
named runs as nobody/nogroup by default, so just invoke it as “name –chroot
/var/named/root”

B.
Use /usr/bin/chroot after running “chown nobody.nogroup named”

C.
Add “user nobody; group nogroup; chroot /var/named/root” to named.conf

D.
Invoke named as “named -t /var/named/root -u nobody”