diff --git a/bundles/rspamd/items.py b/bundles/rspamd/items.py
index 6890ef8..f7b82be 100644
--- a/bundles/rspamd/items.py
+++ b/bundles/rspamd/items.py
@@ -72,6 +72,7 @@ if 'dkim' in node.metadata.get('rspamd', {}):
     actions = {
         'rspamd_assure_dkim_key_permissions': {
             'command': 'chown _rspamd:_rspamd /var/lib/rspamd/dkim/*.key',
+            'unless': 'test -z "$(find /var/lib/rspamd/ -iname \"*.key\" \! -user _rspamd)"',
             'needs': {
                 'action:rspamd_generate_dkim_key',
                 'directory:/var/lib/rspamd/dkim',