setting up dns

I got my BIND dns stuff up and working and I'm securing it now. I setup all my domains as Master types. Is this incorrect?

Also, I'm disabling zone transfers, so I got to named.conf and add thing for each zone to say

allow-transfer { none; };

Also, I'm thinking of changing BIND to run as non root user for more security.

all that is fine. And it is recommended that bind runs under the "named" user. Set the permissions for it's PID directory and var/named directory to "named" and start named with the following commandline:

./named -u named