There currently isn't any documentation discussing the salt_token, and this is vital to add. If a salt_token exists, but you disable external auth, you still are unable to ping your minions. It's important to have this.