/root/.ssh/authorized_keys:
  file.managed:
    - source: 'salt://ssh/files/authorized_keys.jinja'
    - template: jinja
    - user: root
    - group: root
    - mode: 400

/root/.ssh/config:
  file.managed:
    - source: 'salt://ssh/files/ssh_config.jinja'
    - template: jinja
    - user: root
    - group: root
    - mode: 400

{% for user in salt.pillar.get('authkey_users', []) %}
/home/{{user}}/.ssh/authorized_keys:
  file.managed:
    - source: 'salt://ssh/files/authorized_keys.jinja'
    - template: jinja
    - user: {{user}}
    - group: {{user}}
    - mode: 400
{% endfor %}