rndc: connect failed: 127.0.0.1#953: connection refused on RHE7 and later

Issue

Despite the following description in rndc.conf, the rndc command is refused.

E.g.

# cat /etc/rndc.conf
key "keyID" {
    algorithm hmac-sha256;
    secret "oy6MnWZltBHEki1Gi82tCbzZjO3xGn15GD1vWYz50y4=";
};

options {
default-key "keyID";
default-server 127.0.0.1;
default-port 953;
};

# rndc status
rndc: connect failed: 127.0.0.1#953: connection refused

# systemctl status named-chroot
● named-chroot.service - Berkeley Internet Name Domain (DNS)
   Loaded: loaded (/usr/lib/systemd/system/named-chroot.service; enabled; vendor preset: disabled)
   Active: active (running) since Sun YYYY--MM-DD HH:MM:SS EDT; 8s ago
...