diff --git a/sssd.spec b/sssd.spec
index 7548313..c867455 100644
--- a/sssd.spec
+++ b/sssd.spec
@@ -38,7 +38,7 @@
 
 Name: sssd
 Version: 1.16.2
-Release: 1%{?dist}
+Release: 3%{?dist}
 Group: Applications/System
 Summary: System Security Services Daemon
 License: GPLv3+
@@ -859,7 +859,7 @@ done
 %attr(700,root,root) %dir %{_sysconfdir}/sssd
 %attr(711,root,root) %dir %{_sysconfdir}/sssd/conf.d
 %if (0%{?use_openssl} == 1)
-%attr(711,sssd,sssd) %dir %{_sysconfdir}/sssd/pki
+%attr(711,root,root) %dir %{_sysconfdir}/sssd/pki
 %endif
 %ghost %attr(0600,root,root) %config(noreplace) %{_sysconfdir}/sssd/sssd.conf
 %dir %{_sysconfdir}/logrotate.d
@@ -1261,6 +1261,10 @@ fi
                                 %{_libdir}/%{name}/modules/libwbclient.so
 
 %changelog
+* Thu Jun 21 2018 Fabiano fidêncio <fidencio@fedoraproject.org> - 1.16.2-3
+- Resolves: rhbz#1591804 - something keeps /lib/libnss_systemd.so.2 open on
+                           minimal appliance image, breaking composes
+
 * Mon Jun 11 2018 Fabiano Fidêncio <fidencio@fedoraproject.org> - 1.16.2-1
 - New upstream release 1.16.2
 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_16_2.html