In SaltStack Salt before 2016.3.6, compromised salt-minions can impersonate the salt-master. References: https://docs.saltstack.com/en/2017.7/topics/releases/2016.3.6.html
Created salt tracking bugs for this issue: Affects: epel-all [bug 1572140]