@terminalmage you probably understand what is going on here; I believe you forgot to update the permissions when the file.managed changes the file? In my scenario, a new file gets 0644 but updating the file switches the permissions to 0600. I am not sure but somewhere before or after https://github.com/saltstack/salt/blob/develop/salt/modules/file.py#L2470?