Requesting help, sa-update, cron, gpg, unsafe ownership on homedir

I have a cron job running as root, which calls sa-update

it warns about unsafe ownership
----------------------------------------------------

gpg: WARNING: unsafe ownership on homedir
`/var/lib/spamassassin/sa-update-keys'

----------------------------------------------------
this is my current ownership

ls -la /var/lib/spamassassin/sa-update-keys
total 16
drwx------ 2 spamd root  4096 Jun 20  2017 .
drwxr-xr-x 7 spamd spamd 4096 Nov 22  2018 ..
-rwx------ 1 spamd root  2783 Jun 20  2017 pubring.gpg
-rwx------ 1 spamd root     0 Jun 20  2017 pubring.gpg~
-rwx------ 1 spamd root     0 Jun 20  2017 secring.gpg
-rwx------ 1 spamd root  1200 Jun 20  2017 trustdb.gpg

----------------------------------------------------

I've read that the ownership should be root, so does having the owner =
spamd, and the group = root, causing that warning? I thought having group =
root would fix any ownership issues. I cannot recall now, why I set owner
to spamd. maybe spamd could not read the gpg keys when trying an update
before?

----------------------------------------------------
Should I chown the folders and files to be root : root ?