Excerpt of grub state with multiple file.replace/managed

init.sls

grubpermissions:
  file.managed:
    - name: {{ grub.cfg }}
    - user: root
    - group: root
    - mode: 600
    - replace: False
    - source: None

addpassword:
  file.replace:
    - name: {{ grub.cfg }}
    - pattern: 'password --.*'
    - repl: 'password --md5 {{ salt['pillar.get']('system_users:grub_md5') }}'
    - prepend_if_not_found: True

addaudit:
  file.replace:
    - name: {{ grub.cfg }}
    - pattern: '(\s*kernel(?!.*audit=1).*$)'
    - repl: '\1 audit=1'