I configure systems on the first Salt state.highstate run completly and without any errors. this changes makes it possible to wait for the postfix pkg before deploying X509 keys which need a chgroup postfix <file>