Ensure a specific version of salt

Currently we upgrade salt using salt, but if a minion isn't
accessible, we want to ensure that salt is running the upgraded
version.

Change-Id: I8502fbc3c666b717705f534a0a460782ccfe19cc