fix perms on base salt install & use salt-admin group