Thanks for the warning. We are doing a lot of testing with 3006, first. And foreman/plugin testing will be part of that. We are already forcing all of our salt-master services to run as root, because PAM doesnt work with non root users. Even salt says that running as root doesnt have that big of a security impact, because if someone has access to salt, under any user, they have access to all the minions. But I think enough people have told them they dont want it running as root.
Thanks again!