I haven't been a fan of Salt since learning they decided to roll their own encryption.

You don't have to look that far to find problems with that:

https://github.com/saltstack/salt/commit/5dd304276ba5745ec21...