monitor ALL, ALL = NOPASSWD: /usr/bin/salt-call pillar.get *
